5.3
Moyenne
CVE-2026-87979 The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch…
Description
The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook, allowing unauthenticated attackers to write a card-token record to any user's account and to enumerate registered accounts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Paymob for WooCommerce 4.1 | premières → < 4.1.14 | 4.1.14 |
Autres CVE de Paymob for WooCommerce
Les 4 CVE de Paymob for WooCommerce →
CVE-2026-87978
The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its…
5.3
Moyenne
CVE-2026-87981
The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX…
4.7
Moyenne
CVE-2026-15205
The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier…
8.6
Élevée