Eurobank CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Eurobank CVE published 2026-10-26

CVE-2026-103300

The Eurobank WooCommerce Payment Gateway plugin for WordPress has a vulnerability that allows unauthenticated attackers to mark any pending order as paid and force any order into a failed status. This is due to the plugin not verifying payment-confirmation requests and shipping with an empty secret by default. The vulnerability affects WordPress installations using this plugin, potentially leading to fina [truncated]