Is CVE-2026-84043 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84043?

CVE-2026-84043 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-84043

Description

The ePayco Payment Gateway for WooCommerce WordPress plugin before 8.4.7 does not properly verify the authenticity of payment confirmation requests, allowing unauthenticated attackers to mark orders as paid without a valid gateway signature.