Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Confirmation Forgery via Unverified Success Return

Published 32 d ago 2026-10-06 · modified 31 d ago 2026-10-06 · JSON

CVSS

5.3

v3.1 · CNA

CISA KEV

not known exploited

EPSS

0.2%

percentile 8%

Public exploits

none known

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated users to have orders marked as paid without any payment being taken.

CISA SSVC assessment

Exploitation: none
Automatable: yes
Technical impact: partial
Assessed: 32 d ago 2026-10-06

Exploit prediction (EPSS)

0.18% probability of exploitation in the next 30 days, higher than 8% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CISA ADP	3.1	5.3	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`
CNA	3.1	5.3	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Affected products

Unknown Deema Payment Gateway

Classification

Weakness

CWE-287 Improper Authentication

References

wpscan.com /vulnerability/9455978a-b406-4456-9054-a516c117bdbf/ · exploit, vdb-entry, technical-description

Sources

CVE List: CVE-2026-94271
NVD: CVE-2026-94271

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary