GCVE - cpe:2.3:a:unknown:payment_gateway_for

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:payment_gateway_for_telcell:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Payment Gateway For Telcell (`91f0fb2e-8673-5d57-8506-6b7d8b6409f8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-103301`	vulnerable	2026-11-03 10:15:48.368483	Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret MEDIUM (5.3) The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notifications, because the secret used to sign them is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary WooCommerce orders as paid. The same handler also marks an attacker-chosen order as failed when given an invalid signature. Published: 2026-10-21T08:38:56.211Z Updated: 2026-10-21T10:14:55.631Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/c3b5f5fb-cddf-47f3-b39f-8bcd2c738c83/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6786`	vulnerable	2026-06-08 06:21:55.829444	Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue Published: 2025-05-15T20:09:19.335Z Updated: 2025-05-17T02:51:30.687Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/f3e64947-3138-4ec4-86c4-27b5d6a5c9c2/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.