Unknown Rede Itaú For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Rede Itaú For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2026-92429unknownrede itaú for woocommerce
EPSS score
0.11%
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.5.3CVE-2026-92428unknownrede itaú for woocommerce
EPSS score
0.11%
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.