What is GHSA-4573-j266-gqm9?

GHSA-4573-j266-gqm9 is a security advisory published by GitHub Security Advisories with Medium severity. The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of...

Which CVE IDs does GHSA-4573-j266-gqm9 cover?

GHSA-4573-j266-gqm9 covers the following CVE IDs: CVE-2026-106014. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4573-j266-gqm9?

GHSA-4573-j266-gqm9 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-4573-j266-gqm9MediumCVSS 5.3

The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of...

Vendor

GitHub Security Advisories

Published

October 19, 2026

Last Modified

October 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-106014 →

📋 Description

The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without actually paying.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-106014
https://wpscan.com/vulnerability/30ccd424-a0a1-40a9-93ab-5def94eb0073
https://github.com/advisories/GHSA-4573-j266-gqm9