CVE-2026-87843
Trust Payments Gateway for WooCommerce < 3.1.0 - Unauthenticated Order Payment Completion via Payment Return Page
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the authenticity of the payment provider's response when a customer returns from the hosted payment page, nor bind that response to the targeted order or check the amount, allowing unauthenticated attackers to mark arbitrary orders as paid without any payment being made, and to retrieve order and customer details.
| Vendor | unknown |
| Product | trust payments gateway for woocommerce |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown trust payments gateway for woocommerce
Be the first to know when new unknown vulnerabilities affecting unknown trust payments gateway for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Trust Payments Gateway for WooCommerce
0 < 3.1.0
References
Credits
ryan fabella WPScan