https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T11:08:01.322571+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-92996 CVE-2026-92996 — Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done 2026-09-30T11:08:01.326662+00:00

Affected: Unknown Verge3D Publishing and E-Commerce

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid.