Understanding and Defending Against CVE-2026-12973: Unauthorized Disclosure and Modification of WooCommerce Order Status
CVE-2026-12973 is a vulnerability in the PayPlus Payment Gateway WordPress plugin that allows unauthenticated users to disclose secret order keys and modify order statuses. This vulnerability has a CVSS score of 6.5 and is considered medium severity. It is not currently being actively exploited in the wild.