CVE-2026-18031CWE-287

CVE-2026-18031

Critical · published August 19, 2026

CVSS v3.1

9.8

EPSS

Percentile

41.8

In the wild

Unconfirmed

What it is

The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator.

The record

Technical detail

CVSS v3.1: 9.8 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00498 · 41.8th percentile
Weakness: CWE-287 · Improper Authentication
Published: 2026-08-19T10:17Z

References (1)

https://wpscan.com/vulnerability/6576dcd1-aea6-47c0-9157-4ca56f426612/ · [email protected]

EPSS history

Timeline

19 AUG 06:00Z
TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback
cvelistv5