https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T13:41:18.455577+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-106010 CVE-2026-106010 — BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery 2026-10-20T13:41:18.457036+00:00

Affected: Unknown BDM Digital Payment Gateway

The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats unset credentials as valid, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid without payment in the default configuration.