Mintpay CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Mintpay CVE published 2026-10-26

CVE-2026-103381

The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the authenticity of the payment callback it processes, allowing unauthenticated attackers to mark arbitrary orders as paid, to cancel arbitrary orders, and to disclose order details including customer contact information. This vulnerability affects WooCommerce sites using the Mintpay plugin, especially those with versions up to 2.2 [truncated]