Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-21
for WooCommerce - Security Vulnerability (CVE-2026-92430)
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the authenticity of its PIX payment webhook before updating an order's status, allowing unauthenticated attackers to mark a pending order as paid without paying.
PLUGIN
for WooCommerce
CVE-2026-92430
Risk Score
Threat Entry
Updated 2026-06-17
for WooCommerce - Broken Access Control (CVE-2026-0942)
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs() function in all versions up to, and including, 5.1.5. This makes it possible for unauthenticated attackers to delete the Rede Order Logs metadata from all WooCommerce orders.
PLUGIN
for WooCommerce
CVE-2026-0942
Risk Score
Threat Entry
Updated 2026-06-17
for WooCommerce - Security Vulnerability (CVE-2026-0939)
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possible for unauthenticated attackers to manipulate WooCommerce order statuses, either marking unpaid orders as paid, or failed.
PLUGIN
for WooCommerce
CVE-2026-0939
Risk Score