CVE-2026-104651
Yaad Sarig Payment Gateway For WC < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation via IDOR
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment-processing actions, allowing any authenticated user, including subscribers, to act on and alter orders belonging to other customers.
| Vendor | unknown |
| Product | yaad sarig payment gateway for wc |
| Published | Oct 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown yaad sarig payment gateway for wc
Be the first to know when new unknown vulnerabilities affecting unknown yaad sarig payment gateway for wc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Yaad Sarig Payment Gateway For WC
0 < 2.2.13
References
Credits
Ryan Fabella WPScan