CVE-2026-94273 – The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider

The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider’s response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.