CVE-2026-103381
Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the authenticity of the payment callback it processes, allowing unauthenticated attackers to mark arbitrary orders as paid, to cancel arbitrary orders, and to disclose order details including customer contact information.
| Vendor | unknown |
| Product | mintpay for woocommerce |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown mintpay for woocommerce
Be the first to know when new unknown vulnerabilities affecting unknown mintpay for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Mintpay for WooCommerce
0 ≤ 2.2.3
References
Credits
Naoki Kawahigashi WPScan