Paymob
Paymob FOR Woocommerce: vulnerabilidades y CVE
Paymob FOR Woocommerce tiene 6 vulnerabilidades publicadas, 6 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses6
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-87978 | Media (5.3) | 0.11% | — | 23 sept 2026 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid… |
| CVE-2026-87981 | Media (4.7) | 0.17% | — | 23 sept 2026 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway configuration, allowing users with contributor-level access to… |
| CVE-2026-87979 | Media (5.3) | 0.20% | — | 23 sept 2026 | The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook, allowing unauthenticated attackers to write a card-token record to any… |
| CVE-2026-66611 | Alta (7.1) | 0.25% | — | 20 ago 2026 | Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions. |
| CVE-2026-15205 | Alta (8.6) | 0.45% | — | 14 ago 2026 | The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this… |
| CVE-2026-56025 | Alta (7.5) | 0.35% | — | 26 jun 2026 | Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.