CVE-2026-92430

UNKNOWN 0.0

Rede Itaú for WooCommerce < 5.4.7 - Unauthenticated Order Status Manipulation via PIX Webhook

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the authenticity of its PIX payment webhook before updating an order's status, allowing unauthenticated attackers to mark a pending order as paid without paying.

Vendor	unknown
Product	rede itaú for woocommerce — payment pix, credit card and debit
Published	Sep 19, 2026

Stay Ahead of the Next One

Get instant alerts for unknown rede itaú for woocommerce — payment pix, credit card and debit

Be the first to know when new unknown vulnerabilities affecting unknown rede itaú for woocommerce — payment pix, credit card and debit are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit

3.6.1 < 5.4.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/1f1d7de5-cb7c-4440-b998-c6f15ecc6b4c/

Credits

Pablo González Pérez Francisco José Ramírez Vicente and Iñigo Sánchez Enciso WPScan