A vulnerability identified as critical has been detected in iPaymu Payment Gateway for WooCommerce Plugin up to 2.0.2 on WordPress. This affects the function check_ipaymu_response of the component Webhook Endpoint. The manipulation leads to missing authorization.

This vulnerability is listed as CVE-2026-0656. The attack may be initiated remotely. There is no available exploit.