Tag: Webhook Forgery (2 posts)

CVE

CVE-2026-57408 - Peach Payments Gateway Payment Status Forgery via Unauthenticated Webhook

Unauthenticated webhook forgery in Peach Payments Gateway <= 4.0.2 lets attackers mark pending WooCommerce orders as paid by submitting a forged successful payment result.

Read

CVE WordPress Webhook Forgery Payment Bypass

CVE

CVE-2026-42743 - Masteriyo LMS Lemon Squeezy Webhook Forgery

Broken authentication in Masteriyo LMS 2.1.8 allows unauthenticated attackers to forge Lemon Squeezy webhooks and mark pending orders as paid.

Read

CVE WordPress Webhook Forgery Broken Access Control