Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 00:32:11 +0000 CVE-2026-106014 — Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery https://db.gcve.eu/vuln/cve-2026-106014 <p><strong>Affected:</strong> Unknown Gateway for Vantiv on WC</p> <p>The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without actually paying.</p> <p><strong>Affected:</strong> Unknown Gateway for Vantiv on WC</p> <p>The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without actually paying.</p> https://db.gcve.eu/vuln/cve-2026-106014