Description
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xendit | Xendit Payment | ≤ 7.1.0 | — |
High · 7.5
CVE-2026-66473
EUVD-2026-49668GHSA-c3qw-m7vg-pw3x
WordPress Xendit Payment plugin <= 7.1.0 - Broken Access Control vulnerability
Published Jul 27, 2026 · Updated Jul 28, 2026 · Assigned by Patchstack