CVE-2026-103375
Antom Payments <= 2.0.11 - Unauthenticated WooCommerce Order Data Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before returning an order's confirmation link, which contains its secret key, to unauthenticated visitors, allowing attackers to view any customer's order details, including name, address, phone number and email.
| Vendor | unknown |
| Product | antom payments |
| Published | Nov 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown antom payments
Be the first to know when new unknown vulnerabilities affecting unknown antom payments are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Antom Payments
0 ≤ 2.0.11
References
Credits
Usama Arshad WPScan