{"id":"CVE-2026-105975","revision":"4328a62692b94e6e821173d215642a96","records":[{"revision":"4328a62692b94e6e821173d215642a96","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-105975","aliases":[],"title":"CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference","description":"The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy genuine payment records, and write CamPay Shortcode Payment Gateway WordPress plugin before 1.7 meta onto arbitrary posts.","state":0,"publishedAt":"2026-10-14T06:00:09.695+00:00","modifiedAt":"2026-10-14T13:42:24.134+00:00","affected":[{"ecosystem":"Vendor product","name":"CamPay Shortcode Payment Gateway","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"CamPay Shortcode Payment Gateway\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.7\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/a5da90f5-563d-4397-b3bc-38bd1dc9aefb/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105975","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-105975","identifiers":["CVE-2026-105975"]},"retained":false,"historicalAffected":[]}],"coverage":[]}