UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-121970

Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery

Severity
Medium 6.3
Published
4 Nov 2026
Last changed
4 Nov 2026
Added to UpHeron
4 Nov 2026
Fixed in
6.4.1
Sources
CVE Program

Affected software

SoftwareAffected versions
Woo Vipps (WordPress plugin)WordPress plugins · wp-plugin:woo-vipps
  • From 5.0.0 before 6.4.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-121970