GCVE - cpe:2.3:a:unknown:payplug_for_woocommerce

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:payplug_for_woocommerce_(official):*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Payplug For Woocommerce (Official) (`c10f20a9-2e70-5c4c-95f2-1103fb8d45f3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-113813`	vulnerable	2026-11-03 10:16:27.138505	PayPlug for WooCommerce 2.8.0 - 3.1.0 - Unauthenticated Arbitrary Order Deletion, Modification and Disclosure The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check on a set of unauthenticated AJAX actions that operate on a caller-supplied order identifier, allowing unauthenticated attackers to modify, read the contents of, and permanently delete arbitrary WooCommerce orders. Published: 2026-10-28T06:00:26.467Z Updated: 2026-10-28T17:58:04.601Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/6decb385-7cc9-42d7-a079-0a96d1f697fc/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-110292`	vulnerable	2026-11-03 10:16:01.114069	PayPlug for WooCommerce 2.9.0 - 3.1.0 - Unauthenticated Order Key Disclosure and Order Cancellation via payplug_create_intent The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, allowing unauthenticated users to disclose another customer's order key and cancel their unpaid guest order. Published: 2026-10-28T06:00:22.829Z Updated: 2026-10-28T17:58:07.648Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/91444324-4332-489e-9e97-f371d866c20c/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.