PatchSiren

Global Payments CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Global Payments CVE published 2026-04-08

CVE-2026-39645

A Server-Side Request Forgery (SSRF) vulnerability was identified in the GlobalPayments WooCommerce plugin. This issue, tracked as CVE-2026-39645, allows for Server Side Request Forgery and affects versions from n/a through <= 1.18.0. The vulnerability has a CVSS score of 5.4 and a severity rating of MEDIUM. The vulnerability exists due to inadequate validation of user input, allowing attackers to make un [truncated]