Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #5

PayDunya WooCommerce payment plugin flagged over unverified payment notifications

Original: 🚨 EUVD-2026-110631 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: PayDunya WooCommerce Payment Gateway 🏢 Vendor: Unknown 📅 Updat

A newly logged vulnerability, EUVD-2026-110631, carries a moderate CVSS v3.1 score of 5.3 and affects the PayDunya WooCommerce Payment Gateway plugin for WordPress, up to and including version 1.1.6. The flaw lies in the plugin failing to verify the authenticity of incoming payment notifications, meaning attackers could potentially forge payment confirmations and receive goods or services without paying.

Why now: Online store owners using the PayDunya gateway are checking whether they need to patch or replace the plugin.

PayDunya WooCommerce Payment GatewayWordPressENISA EUVD database

Open on mastodon →

Evidence

• 🚨 EUVD-2026-110631 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: PayDunya WooCommerce Payment Gateway 🏢 Vendor: Unknown 📅 Updated: 2026-10-27 📝 The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payment notifications… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3842559