CVE-2026-84043 — ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass

CVE-2026-84043

ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass PUBLISHED

Description (CNA)

The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature.

Affected (CNA)

Vendor / product	Versions
Unknown / ePayco Payment Gateway for WooCommerce	affected 0 before 8.4.7

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/96599654-1d7f-4ff0-a4b4-26e540375a67/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.