CVE-2026-18031 — TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback

CVE-2026-18031

TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback PUBLISHED

Description (CNA)

The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator.

Affected (CNA)

Vendor / product	Versions
Unknown / TabaPay Gateway	affected 0 through 1.4.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/6576dcd1-aea6-47c0-9157-4ca56f426612/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.