CVE-2026-106027 | WooCommerce Oxygen MyData for WooCommerce Plugin up to 3.0.8 on WordPress Payment Callback authorization

November 12, 2026 Yanac

A vulnerability was found in WooCommerce Oxygen MyData for WooCommerce Plugin up to 3.0.8 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Payment Callback. The manipulation results in missing authorization.

This vulnerability is known as CVE-2026-106027. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More