{"schema":"threatline.record/2","record":{"id":"CVE-2026-103330","aliases":[],"summary":"Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass","details":"The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is attacker-controlled, allowing unauthenticated attackers to forge a valid confirmation and mark orders as paid without payment.","categories":["Unclassified"],"product":"Sadad QA Payment","vendor":"Unknown","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103330","source_modified_at":"2026-10-28T10:45:12.352Z","fetched_at":"2026-10-28T15:55:58.673066Z","product":"Sadad QA Payment","vendor":"Unknown","versions":[{"status":"affected","versionType":"semver","version":"1.28","lessThanOrEqual":"1.28"}],"defaultStatus":"unknown"}],"fixed_versions":[],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T10:45:12.352Z","modified_at":"2026-10-28T10:45:12.352Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-103330","fetched_at":"2026-10-28T15:55:58.673066Z","source_modified_at":"2026-10-28T10:45:12.352Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://wpscan.com/vulnerability/0681f5a8-a1cd-44b0-b7c8-c3eacbd9e96a/","tags":["exploit","vdb-entry","technical-description"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T10:45:12.352Z","content_hash":"aecc8be2633074802be9d6d089732277ae0c43f7d954d19f27003b9dea2a5113"}}