Rede Itaú For Woocommerce — Payment Pix, Credit Card And Debit
Approved changes feed: RSS · Atom
cpe:2.3:a:linknacional:rede_itaú_for_woocommerce_—_payment_pix,_credit_card_and_debit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Linknacional (3e135d0f-333d-5c0d-9ab8-3e783b48c871) |
|---|---|
| Product | Rede Itaú For Woocommerce — Payment Pix, Credit Card And Debit (f9fd84a0-69c8-528d-b6a6-63940cdcd5ef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0942 |
vulnerable | 2026-06-08 07:47:13.525095 |
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.5 - Missing Authorization to Unauthenticated Rede Order Logs Deletion
MEDIUM (5.3)
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs() function in all versions up to, and including, 5.1.5. This makes it possible for unauthenticated attackers to delete the Rede Order Logs metadata from all WooCommerce orders.
Published: 2026-01-16T06:43:20.555Z
Updated: 2026-04-08T16:50:25.135Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0939 |
vulnerable | 2026-06-08 07:47:13.517817 |
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation
MEDIUM (5.3)
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possible for unauthenticated attackers to manipulate WooCommerce order statuses, either marking unpaid orders as paid, or failed.
Published: 2026-01-16T06:43:20.971Z
Updated: 2026-04-08T17:00:41.932Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.