A vulnerability labeled as problematic has been found in shohei.tanaka Japanized for WooCommerce Plugin up to 2.8.4 on WordPress. This impacts the function paidy_webhook_permission_check of the component Paidy Webhook Endpoint. Executing a manipulation can lead to missing authorization.

This vulnerability appears as CVE-2026-1305. The attack may be performed from remote. There is no available exploit.