CVE-2026-18031 — TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, all…
Published: 2026-08-19 · CVSS: 9.8 · CVSS 3.1
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7