The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary WooCommerce orders.
CVE-2026-13692
NONE
Updated Jul 29, 2026
WordPress
CVE Details
CVE ID
CVE-2026-13692
Published Date
Jul 29, 2026
Vendor
WordPress
Severity
NONE
Impact
Minimal impact
Source
View Advisory