Review
Snap Finance
CVE published 2026-10-19
CVE-2026-94273
The Snap Finance WordPress plugin through 3.11.0 is vulnerable to unauthorized order status modification. This vulnerability allows unauthenticated attackers to mark WooCommerce orders as paid without completing payment. Defenders of WooCommerce installations using the Snap Finance WordPress plugin should assess exposure and verify payment provider responses to prevent unauthorized order status changes. T [truncated]