Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment…
Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message Manipulation via Man-in-the-Middle. This issue affects WooCommerce Virtual POS Module: from 26.8.3 before 26.9.1.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Sipay Electronic Money And Payment Services Inc.
- Product
- WooCommerce Virtual POS Module
- CVSS v3.1
- 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weakness
- CWE-306, CWE-354
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 38 (Notable)
- CVSS v3.1 9.1 critical
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-85632 on this site · NVD · CVE.org · Vulnpedia