Vulnerabilities and security researches forpayable-payment-gateway-for-woocommerce payable-payment-gateway-for-woocommerce

Nov 04, 2026

CVE, Research URL: CVE-2026-94361
Home page URL: Security reports for PAYable Payment Gateway for WooCommerce
Application: PAYable Payment Gateway for WooCommerce
Date: Oct 31, 2026
Research Description: The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment status of any order in the store regardless of the payment method it was placed with.
Affected versions: max 1.3.1.
Status: vulnerable