{"id":"CVE-2026-94270","state":"PUBLISHED","title":"Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook","description":"The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by default, allowing unauthenticated attackers to mark an unpaid order as paid, or to cancel or refund an existing order.","publishedAt":"2026-10-06T06:00:20.623Z","updatedAt":"2026-10-06T10:41:54.298Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown Deema Payment Gateway"],"affected":[{"vendor":"Unknown","product":"Deema Payment Gateway","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"}]}],"references":["https://wpscan.com/vulnerability/9db2eff1-d605-44c3-aa3e-f65410f8e87b/"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T20:13:34.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/94xxx/CVE-2026-94270.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-94270","state":"PUBLISHED","datePublished":"2026-10-06T06:00:20.623Z","dateUpdated":"2026-10-06T10:41:54.298Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2026-09-21T09:16:17.649Z"},"containers":{"cna":{"title":"Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook","descriptions":[{"lang":"en","value":"The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by default, allowing unauthenticated attackers to mark an unpaid order as paid, or to cancel or refund an existing order."}],"affected":[{"vendor":"Unknown","product":"Deema Payment Gateway","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.1.2","versionType":"semver"}]}],"references":[{"url":"https://wpscan.com/vulnerability/9db2eff1-d605-44c3-aa3e-f65410f8e87b/","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-287 Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2026-10-06T06:00:20.623Z"},"credits":[{"lang":"en","value":"Pablo González Pérez","type":"finder"},{"lang":"en","value":"Francisco José Ramírez Vicente and Iñigo Sánchez Enciso","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-94270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T10:31:23.678492Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","lang":"en","type":"CWE","description":"CWE-287 Improper Authentication"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-06T10:41:54.298Z"}}]}}}