CyberSecBulletin

PhonePe Payment Solutions vulnerabilities

We track 1 vulnerability in PhonePe Payment Solutions products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest PhonePe Payment Solutions vulnerabilities

  • 7.5 High severity

    PhonePe Payment Solutions: Missing Authorization

    CVE-2026-11575PhonePe Payment Solutions

    The PhonePe Payment Solutions WordPress plugin before 3.1.0 does not properly verify the authenticity of incoming payment callbacks: the secret used to validate the callback signature is empty on sites configured through the current setup flow, so the expected