CVE-2026-42716: Payever - Woocommerce Gateway

Critical severity, CVSS 9.8.

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

Affected products

• Payever Payever - Woocommerce Gateway: up to and including 4.8.2

Published 2026-10-10. Last modified 2026-10-10.