CVE-2026-105970
BCK Auto-confirm Bank Transfer <= 2.0.1 - Unauthenticated WooCommerce Order Payment Confirmation
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer payment notifications on a default installation, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid.
| Vendor | unknown |
| Product | thanh toán quét mã qr code tự động |
| Published | Nov 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown thanh toán quét mã qr code tự động
Be the first to know when new unknown vulnerabilities affecting unknown thanh toán quét mã qr code tự động are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Thanh Toán Quét Mã QR Code Tự Động
0 ≤ 2.0.1
References
Credits
Pedro Pinho WPScan