CVE-2026-107420: Narinder Singh Pay With Metamask For Woocommerce – Cryptocurrency Payment Gateway

Medium severity, CVSS 5.3.

Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions.

Affected products

• Narinder Singh Pay With Metamask For Woocommerce – Cryptocurrency Payment Gateway: up to and including 1.7.2

Published 2026-10-10. Last modified 2026-10-10.