What is GHSA-352x-whpm-97q9?

GHSA-352x-whpm-97q9 is a security advisory published by GitHub Security Advisories with Medium severity. The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the...

Which CVE IDs does GHSA-352x-whpm-97q9 cover?

GHSA-352x-whpm-97q9 covers the following CVE IDs: CVE-2026-82215. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-352x-whpm-97q9?

GHSA-352x-whpm-97q9 has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-352x-whpm-97q9MediumCVSS 5.9

The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the...

Vendor

GitHub Security Advisories

Published

September 11, 2026

Last Modified

September 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-82215 →

📋 Description

The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel or fail them.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82215
https://wpscan.com/vulnerability/c7703a51-9d5d-4483-b214-7249701ee9ff
https://github.com/advisories/GHSA-352x-whpm-97q9