Read the docs
TI-2026-78590 Aliases CVE-2026-103301GHSA-mcx5-9495-x4v5

Payment Gateway for Telcell accepts forged payment notifications

Priority LOW 29CWE-345Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-345.

Summary

The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notifications because the secret used to sign them is empty by default. An unauthenticated remote attacker can forge a valid notification and mark arbitrary WooCommerce orders as paid, and the same handler can mark an attacker-chosen order as failed when given an invalid signature. This is classified as CWE-345, Insufficient Verification of Data Authenticity. A public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notifications, because the secret used to sign them is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary WooCommerce orders as paid. The same handler also marks an attacker-chosen order as failed when given an invalid signature.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00145 3rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed Payment Gateway for Telcell (Unknown): 2.0.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UnknownPayment Gateway for Telcellbefore 2.0.52.0.5Patch availableCNA
  • Payment Gateway for Telcell VendorUnknown Affected before 2.0.5 Fixed in 2.0.5 Patch available CNA

Remediation

Update the Payment Gateway for Telcell plugin to version 2.0.5. The sources list no fixed version for Payment Gateway for Telcell other than 2.0.5.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA Payment Gateway for Telcell (Unknown) Fixed in 2.0.5

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-103301
  2. 2026-10-21 Alias added: GHSA-mcx5-9495-x4v5

References

Exploit 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences