Known vulnerabilities in Unknown Sifalo Pay
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-94260 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being… | 5.3 Medium | Oct 14, 2026 |
| CVE-2026-94261 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier belongs to the order… | 5.3 Medium | Oct 14, 2026 |