https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 00:04:32 +0000 https://db.gcve.eu/vuln/cve-2026-103319 <p><strong>Affected:</strong> Unknown OPay Payment Gateway for WooCommerce</p> <p>The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly verify that payment notifications originate from the payment provider, as the secret used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary orders as paid, cancelled or failed.</p> <p><strong>Affected:</strong> Unknown OPay Payment Gateway for WooCommerce</p> <p>The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly verify that payment notifications originate from the payment provider, as the secret used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary orders as paid, cancelled or failed.</p> https://db.gcve.eu/vuln/cve-2026-103319