CERT-PY@CERTpy
⚠️ Vulnerabilidad en Complementos para WordPress ❗ CVE-2026-82211 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-complementos-para-wordpress-3/ https://t.co/4GgwM3C7R9
00001150
6.7K followersView on X
CVE-2026-82211
LOWCVSS 8.2 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details.
0.0/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-862
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day