~/research/tags/#Webhook Forgery

> #Webhook Forgery

2 RESEARCH ENTRIES

2026.07.27

CVE-2026-57408

Peach Payments Gateway Payment Status Forgery via Unauthenticated Webhook

Unauthenticated webhook forgery in Peach Payments Gateway <= 4.0.2 lets attackers mark pending WooCommerce orders as paid by submitting a forged successful payment result.

Read Advisory SECREPORT

#CVE #WordPress #Webhook Forgery #Payment Bypass

2026.06.10

CVE-2026-42743

Masteriyo LMS Lemon Squeezy Webhook Forgery

Broken authentication in Masteriyo LMS 2.1.8 allows unauthenticated attackers to forge Lemon Squeezy webhooks and mark pending orders as paid.

Read Advisory SECREPORT

#CVE #WordPress #Webhook Forgery #Broken Access Control