CVE-2026-107420

Deferred Deferred - Pending Action

Unauthenticated Bypass in Pay With MetaMask For WooCommerce

Publication date: 2026-10-10

Last updated on: 2026-10-13

Assigner: Patchstack

Description

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-10

EPSS Evaluated

2026-10-18

NVD

CVE-2026-107420

EUVD

EUVD-2026-96422

Affected Vendors & Products

Vendor	Product	Version / Range
Narinder	Singh	Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

CVE-2026-107420 is an unauthenticated bypass vulnerability in the Pay With MetaMask For WooCommerce plugin versions 1.7.2 and earlier. It allows attackers to bypass security checks without authentication, enabling unauthorized actions.

Detection Guidance

To detect this vulnerability, check the installed version of the Pay With MetaMask For WooCommerce plugin. If it is version 1.7.2 or earlier, the system is vulnerable. Use commands like 'wp plugin list' in WordPress or inspect the plugin files directly.

Impact Analysis

This vulnerability could allow attackers to perform unauthorized actions in the WooCommerce plugin, such as manipulating transactions or accessing restricted features. However, exploitation is considered unlikely due to its low severity.

Compliance Impact

This vulnerability allows unauthenticated bypass of security checks, which could potentially lead to unauthorized access or data exposure. For GDPR, this may impact compliance by increasing the risk of personal data breaches. For HIPAA, it could affect the integrity of protected health information if exploited. However, the low CVSS score (5.3) and lack of known exploitation suggest minimal direct impact on compliance.

Mitigation Strategies

Update the Pay With MetaMask For WooCommerce plugin to version 1.7.3 or later to resolve the vulnerability. Enable auto-updates for vulnerable plugins through Patchstack for faster protection.

Hi! I’m here to help you understand CVE-2026-107420. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70