5.3
Moyenne
CVE-2026-92430 The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the…
Description
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the authenticity of its PIX payment webhook before updating an order's status, allowing unauthenticated attackers to mark a pending order as paid without paying.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit 3.6 | 3.6.1 → < 5.4.7 | 5.4.7 |