Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #6

WordPress crypto payment plugin fails webhook verification

Original: 🚨 EUVD-2026-110632 📊 Score: 3.7/10 (CVSS v3.1) 📦 Product: TiendaCrypto para WooCommerce 🏢 Vendor: Unknown 📅 Updated: 202

A low-severity vulnerability, tracked as EUVD-2026-110632 with a CVSS score of 3.7, has been disclosed in TiendaCrypto para WooCommerce, a WordPress plugin used for cryptocurrency payments in online stores. Versions up to and including 1.2.1 fail to properly verify the authenticity of payment webhooks, potentially allowing forged payment confirmations. Store owners using the plugin are being advised to check for updates.

Why now: The newly published vulnerability advisory raises concerns for WooCommerce merchants accepting crypto payments.

TiendaCrypto para WooCommerceWooCommerceWordPressENISA EUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-110632 📊 Score: 3.7/10 (CVSS v3.1) 📦 Product: TiendaCrypto para WooCommerce 🏢 Vendor: Unknown 📅 Updated: 2026-10-27 📝 The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payment webhook, validating the… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3842560