What is GHSA-vg9h-3m8c-7g2h?

GHSA-vg9h-3m8c-7g2h is a security advisory published by GitHub Security Advisories with Medium severity. The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or...

Which CVE IDs does GHSA-vg9h-3m8c-7g2h cover?

GHSA-vg9h-3m8c-7g2h covers the following CVE IDs: CVE-2026-103375. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vg9h-3m8c-7g2h?

GHSA-vg9h-3m8c-7g2h has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-vg9h-3m8c-7g2hMediumCVSS 5.3

The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or...

Vendor

GitHub Security Advisories

Published

November 8, 2026

Last Modified

November 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-103375 →

📋 Description

The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before returning an order's confirmation link, which contains its secret key, to unauthenticated visitors, allowing attackers to view any customer's order details, including name, address, phone number and email.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-103375
https://wpscan.com/vulnerability/d0ad8f0f-8ca6-4bc9-88c3-9fd64894033e
https://github.com/advisories/GHSA-vg9h-3m8c-7g2h