CVE-2026-94295: Chikkili- Google Pay India for Woocommerce 0 through 1.0.6

Affected technology

Chikkili- Google Pay India for Woocommerce · 0 through 1.0.6
Vendor not specified by the source

Description’s affected range: through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated order as paid

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can mark arbitrary orders as paid without any payment being made.

Published 25-Oct-2026 10:32 UTC

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-25 10:32:14.832500+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-25 10:32:11.866563+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-94295.html