Paymob For Woocommerce (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-23. Vendor: Unknown.

CVEs of Paymob For Woocommerce

• CVE-2026-87978 - CVSS 5.3 (medium), 2026-09-23: The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on one branch of its payment webhook, allowing unauthenticated…
• CVE-2026-87981 - CVSS 4.7 (medium), 2026-09-23: The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway…
• CVE-2026-87979 - CVSS 5.3 (medium), 2026-09-23: The Paymob for WooCommerce WordPress plugin before 4.1.14 does not verify the request signature on the card-token branch of its payment webhook, allowing…
• CVE-2026-15205 - CVSS 8.6 (high), 2026-08-14: The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its…