OPay CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review OPay CVE published 2026-10-26

CVE-2026-103319

The OPay Payment Gateway for WooCommerce plugin has a vulnerability allowing unauthenticated payment confirmation forgery due to an empty default secret key. This issue affects versions up to 2.5.5. The vulnerability allows attackers to forge valid notifications and mark arbitrary orders as paid, cancelled, or failed. Defenders managing WooCommerce installations using this plugin should assess exposure an [truncated]