Medium · 6.5 CVE-2026-95527 EUVD-2026-85495GHSA-fch5-2g54-8rjh

WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack

Vendor: Conekta Group Product: Conekta Payment Gateway

Description

Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions.

Affected products

Vendor	Product	Affected	Fixed
Conekta Group	Conekta Payment Gateway	≤ 6.2.4	—

References

https://patchstack.com/database/wordpress/plugin/conekta-payment-gateway/vulnerability/wordpress-conekta-payment-gateway-plugin-6-2-4-broken-access-control-vulnerability?_s_id=cve vdb-entry