What is GHSA-prpq-x5vv-xrq5?

GHSA-prpq-x5vv-xrq5 is a security advisory published by GitHub Security Advisories with Medium severity. The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a...

Which CVE IDs does GHSA-prpq-x5vv-xrq5 cover?

GHSA-prpq-x5vv-xrq5 covers the following CVE IDs: CVE-2026-92429. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-prpq-x5vv-xrq5?

GHSA-prpq-x5vv-xrq5 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-prpq-x5vv-xrq5MediumCVSS 5.3

The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a...

Vendor

GitHub Security Advisories

Published

October 15, 2026

Last Modified

October 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-92429 →

📋 Description

The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-92429
https://wpscan.com/vulnerability/62c7edfc-2d18-4be6-ba36-215e90563d03
https://github.com/advisories/GHSA-prpq-x5vv-xrq5