Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-94272 The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status…

Description

The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to fail.

Produits et versions touchés

Produit Versions touchées Corrigé en
Snap Finance 1.0 1.0.8 → < 3.12.0 3.12.0

Autres CVE de Snap Finance

Les 2 CVE de Snap Finance →
CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually… 5.3 Moyenne
Suivre cette CVE