PT-2026-65694 · Undefined · Undefined

J4Ck13Ch4N · CVE-2026-13692 · Publicado 2026-07-29 · Atualizado 2026-07-29

NVD

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-13692

Produtos afetados

Undefined

Referências · 2

• 🔥 https://wpscan.com/vulnerability/e2dc15c7-2210-4be8-b7f3-55a9477e488d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13692 · Nota de Segurança