CVE-2026-103375 | BDVDB-2026-401824 Detail
Antom Payments
Description#
The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before returning an order's confirmation link, which contains its secret key, to unauthenticated visitors, allowing attackers to view any customer's order details, including name, address, phone number and email.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
History#
- Version 1Record published in the CVE List.