PatchSiren

Snap Finance CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Snap Finance CVE published 2026-10-19

CVE-2026-94273

The Snap Finance WordPress plugin through 3.11.0 is vulnerable to unauthorized order status modification. This vulnerability allows unauthenticated attackers to mark WooCommerce orders as paid without completing payment. Defenders of WooCommerce installations using the Snap Finance WordPress plugin should assess exposure and verify payment provider responses to prevent unauthorized order status changes. T [truncated]