Unknown Robokassa Payment Gateway For Woocommerce vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Robokassa Payment Gateway For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2026-91076unknownrobokassa payment gateway for woocommerce
EPSS score
0.24%
The Robokassa payment gateway for Woocommerce WordPress plugin before 1.9.0 does not verify the authenticity of an incoming payment-notification request before acting on the order named in it, allowing unauthenticated attackers to force any WooCommerce order into a failed state. Order identifiers are sequential, so every order in the shop can be taken out of the fulfilment queue one request at a time.5.3CVE-2026-91017unknownrobokassa payment gateway for woocommerce+1
EPSS score
0.14%
The Robokassa payment gateway for Woocommerce WordPress plugin before 1.8.9 does not verify the authenticity of incoming payment notifications when its non-default deferred-payment feature is enabled, allowing unauthenticated attackers to forge a notification and mark arbitrary WooCommerce orders as paid or on-hold without payment or a valid signature.