{"affected":[{"defaultStatus":"unaffected","product":"UniPAY Payment Gateway For WooCommerce","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.4","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-123088","cwes":["CWE-200"],"description":"The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not perform any authorization check before returning an order's order-received URL for an attacker-supplied order id, exposing the order's secret key in the redirect and allowing unauthenticated attackers to enumerate orders and disclose customers' personal data (name, email address, phone number and address).","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/8586e94e-15b4-404a-a2b7-37406b62d501/"}],"kev":null,"metrics":[],"modifiedAt":1794204028014,"publishedAt":1794204028014,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/8586e94e-15b4-404a-a2b7-37406b62d501/"}],"remediation":[],"revision":"32de949c4537add83195c42f2d1aaee2394295a19570e547174f968d641e42c4","sources":[{"modifiedAt":1794204028014,"name":"CNA: WPScan","retrievedAt":1794208123752,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123088"}],"ssvc":null,"status":"published","title":"UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII Disclosure","updatedAt":1794208123752}