CVE-2026-103372
Payconiq for WooCommerce <= 1.0.4 - Unauthenticated Order Key Disclosure
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details.
| Vendor | unknown |
| Product | payconiq |
| Published | Oct 28, 2026 |
| Last Updated | Oct 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown payconiq
Be the first to know when new medium vulnerabilities affecting unknown payconiq are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Payconiq
0 ≤ 1.0.4
References
Credits
Naoki Kawahigashi WPScan