Linknacional Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Linknacional Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit: 2 record(s), with affected versions and fixes.
CVE-2026-0942
Medium · 5.3
CWE-306 Jan 16, 2026
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.5 - Missing Authorization to Unauthenticated Rede Order Logs Deletion
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs() function in all versions up to, and including, 5.1.5. This makes it possible for unauthenticated attackers to delete the Rede Order Logs metadata from all WooCommerce orders.
CVE-2026-0939
Medium · 5.3
CWE-345 Jan 16, 2026
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation
The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and including, 5.1.2. This is due to the plugin failing to verify the authenticity of payment callbacks. This makes it possible for unauthenticated attackers to manipulate WooCommerce order statuses, either marking unpaid orders as paid, or failed.