Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Paymob for WooCommerce — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Paymob for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Paymob

CVE ID Title CVSS Severity Published
CVE-2026-87978 Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback 5.3 Medium 2026-09-23
CVE-2026-87979 Paymob for WooCommerce < 4.1.14 - Unauthenticated Saved Card Token Write to Any User via Webhook - - 2026-09-23
CVE-2026-87981 Paymob for WooCommerce < 4.1.14 - Contributor+ Payment Gateway Configuration Deletion and Modification via Multiple AJAX Actions - - 2026-09-23
CVE-2026-66611 WordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-20
CVE-2026-15205 Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup - - 2026-08-14
CVE-2026-56025 WordPress Paymob for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability CWE-862 7.5 High 2026-06-26

All 6 known CVE vulnerabilities affecting Paymob for WooCommerce with full Chinese analysis, references, and POCs where available.