PayHere CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM PayHere CVE published 2026-11-02

CVE-2026-103310

The PayHere Payment Gateway WordPress plugin, versions 2.4.0 through 2.4.5, has a vulnerability that allows unauthenticated attackers to forge payment confirmations when the merchant secret is unset, which is the default state. This issue can lead to potential payment forgery and financial loss. Defenders managing WordPress sites using this plugin should assess exposure and verify the plugin version to pr [truncated]