CamPay Shortcode Payment Gateway CVE Debriefs

CamPay Shortcode Payment Gateway CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review CamPay Shortcode Payment Gateway CVE published 2026-10-14

CVE-2026-105975

The CamPay Shortcode Payment Gateway plugin for WordPress, versions before 1.7, is vulnerable to unauthenticated payment status forgery. This vulnerability allows attackers to mark payment records as paid, destroy genuine payment records, and write plugin metadata onto arbitrary posts. The vulnerability was reported by WPScan and documented in the CVE Program record and NVD vulnerability detail page. Defe [truncated]