https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T11:51:08.278823+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-81740 CVE-2026-81740 — Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback 2026-10-03T11:51:08.280413+00:00

Affected: Unknown Paytm Payment Gateway

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of arbitrary orders, including marking unpaid orders as paid and reducing stock.