Buckaroo Woocommerce Payments Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:buckaroo_woocommerce_payments_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Buckaroo Woocommerce Payments Plugin (ece7e99b-2ab1-51b2-9270-a7fa73e386f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13329 |
vulnerable | 2026-09-16 04:32:49.857767 |
WC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order Refund
The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds, allowing any authenticated user, including Subscribers, to trigger refunds against captured orders.
Published: 2026-08-01T06:00:11.989Z
Updated: 2026-08-03T18:52:09.339Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.