PAYable Payment Gateway for WooCommerce, CVE-2026-94361

CVE, Research URL: CVE-2026-94361
Home page URL: Security reports for PAYable Payment Gateway for WooCommerce
Application: PAYable Payment Gateway for WooCommerce
Published on: Oct 31, 2026
Research Description: The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment status of any order in the store regardless of the payment method it was placed with.
Affected versions: max 1.3.1.
Status: vulnerable