Walletdoc CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Walletdoc CVE published 2026-10-14

CVE-2026-103307

The Walletdoc Payment Gateway for WooCommerce plugin before version 1.8.5 is vulnerable to unauthenticated SQL injection and order payment forgery via webhook. This vulnerability allows attackers to perform SQL injection attacks and mark arbitrary orders as paid. Defenders should assess exposure and prioritize updating to version 1.8.5 or later. The vulnerability requires verification of plugin versions a [truncated]