CVE-2026-121993 | wedevs wePOS Plugin up to 2.0.2 Payment Processing process missing authentication

November 4, 2026 Yanac

A vulnerability labeled as problematic has been found in wedevs wePOS Plugin up to 2.0.2. This affects an unknown part of the file /wepos/v1/payment/process of the component Payment Processing. The manipulation results in missing authentication.

This vulnerability is known as CVE-2026-121993. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More