https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T19:36:12.706268+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-86791 CVE-2026-86791 — iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery 2026-10-20T19:36:12.885289+00:00

Affected: Unknown iPOSpays Payment Gateway for WooCommerce

The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.