Read the docs
TI-2026-78638 Aliases CVE-2026-111957GHSA-r6r9-jfqh-hrq2

Incorrect authorization in SUMIT Payment Gateway for WooCommerce

Priority LOW 30CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-863.

Summary

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider to the order being completed. It also does not check the payment amount against the order total. An unauthenticated attacker can mark a pending order as paid by replaying a payment identifier from any single genuine payment. The CVSS 3.1 base score is 5.3 (medium), and a public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider to the order being completed, nor check the payment amount against the order total, allowing unauthenticated users to mark a pending order as paid by replaying a payment identifier obtained from any single genuine payment.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00247 16th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed SUMIT Payment Gateway for WooCommerce (Unknown): 4.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UnknownSUMIT Payment Gateway for WooCommercebefore 4.0.04.0.0Patch availableCNA
  • SUMIT Payment Gateway for WooCommerce VendorUnknown Affected before 4.0.0 Fixed in 4.0.0 Patch available CNA

Remediation

Update SUMIT Payment Gateway for WooCommerce to version 4.0.0 or later.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA SUMIT Payment Gateway for WooCommerce (Unknown) Fixed in 4.0.0

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-111957
  2. 2026-10-21 Alias added: GHSA-r6r9-jfqh-hrq2

References

Exploit 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences