← CVE Intelligence

CVE-2026-14830

FlxWoo < 3.1.1 - Unauthenticated Payment Bypass PUBLISHED

Description (CNA)

The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment processor that a checkout session was actually paid before marking the associated order as paid, allowing unauthenticated attackers to complete WooCommerce orders without paying.

Affected (CNA)

Vendor / productVersions
Unknown / FlxWooaffected 0 before 3.1.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.