Medium · 6.5 CVE-2026-42637 EUVD-2026-93059GHSA-28x2-x4c5-mp8x

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: Payplug Product: PayPlug for WooCommerce (Official) Category: Web / CMS

Description

Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Payplug	PayPlug for WooCommerce (Official)	≤ 3.1.0	—

References

https://patchstack.com/database/wordpress/plugin/payplug/vulnerability/wordpress-payplug-for-woocommerce-official-plugin-3-1-0-settings-change-vulnerability?_s_id=cve vdb-entry