Veille CVE

Recherche « Unknown Rede Itaú for WooCommerce »

3 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Rede Itaú for WooCommerce » ✕
  1. CVE-2026-92429 5.3 Moyenne

    Unknown Rede Itaú for WooCommerce

    The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.

  2. CVE-2026-92428 5.3 Moyenne

    Unknown Rede Itaú for WooCommerce

    The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.

  3. CVE-2026-92430 5.3 Moyenne

    Unknown Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit

    The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the authenticity of its PIX payment webhook before updating an order's status, allowing unauthenticated attackers to mark a pending order as paid without paying.