{"id":"CVE-2026-103331","title":"UniPAY Payment Gateway For WooCommerce <= 2.3 - Unauthenticated Order Payment Forgery via Empty IPN Secret","summary":"The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the authenticity of payment notifications, as their signature is checked against a merchant secret that is empty by default, allowing unauth…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"adp","cwe":["CWE-287"],"product":"UniPAY Payment Gateway For WooCommerce","affected":["unipay_payment_gateway_for_woocommerce <= 2.3"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-28T17:51:06.716523Z"},"published":"2026-10-28","updated":"2026-10-28","sourceUpdated":"2026-10-28T17:58:09.780Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-103331","references":[{"url":"https://wpscan.com/vulnerability/a7d61b5f-9e92-459c-8f6d-1c92ea94ef00/"}],"tags":["cve.org"],"epss":0.00153,"epssPercentile":0.04422,"ingestedAt":"2026-10-28T07:06:27.172Z","slug":"CVE-2026-103331","body":"## Overview\n\nThe UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the authenticity of payment notifications, as their signature is checked against a merchant secret that is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary orders as paid.\n\n## Affected\n\n- `unipay_payment_gateway_for_woocommerce <= 2.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":230768,"id":"CVE-2026-103331","ts":1793211382033,"field":"cvss","old":null,"new":"5.3"},{"seq":230767,"id":"CVE-2026-103331","ts":1793211382033,"field":"severity","old":"none","new":"medium"}]}