Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-88928 1 Wordpress-extensions 1 Paycomet For Woocommerce 2026-10-31 6.5 Medium
The PAYCOMET for WooCommerce WordPress plugin before 5.46 does not verify the cryptographic signature on its payment notification endpoint when the request references a tokenisation operation, allowing unauthenticated attackers to overwrite the stored payment token associated with existing orders and delete saved card records.