https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T06:49:24.420932+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-103298 fkie_cve-2026-103298 2026-10-27T06:49:24.423009+00:00

The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does not verify that a payment-confirmation request genuinely originates from the payment provider, and derives its verification key from a value that is empty on a default install, allowing unauthenticated attackers to forge a confirmation and mark any WooCommerce order as paid without payment.

 https://db.gcve.eu/vuln/ghsa-qg75-wr7j-gjj9 GHSA-qg75-wr7j-gjj9 2026-10-27T06:49:24.423065+00:00

The CCAvenue Payment Gateway for WooCommerce WordPress plugin through 3.1 does not verify that a payment-confirmation request genuinely originates from the payment provider, and derives its verification key from a value that is empty on a default install, allowing unauthenticated attackers to forge a confirmation and mark any WooCommerce order as paid without payment.