agentprime: corvusinfo-corvuspay-woocommerce-payment-gatewayEvery new CVE for corvusinfo-corvuspay-woocommerce-payment-gateway.https://agentprime.io/CVE-2026-6939: CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting via 'approval_code' Parameterhttps://agentprime.io/advisories/CVE-2026-6939/https://agentprime.io/advisories/CVE-2026-6939/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jul 2026 05:35:50 GMTCVECVE-2026-9028: CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Missing Authorization to Unauthenticated Arbitrary Order Cancellation via 'order_number' Parameterhttps://agentprime.io/advisories/CVE-2026-9028/https://agentprime.io/advisories/CVE-2026-9028/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:31:20 GMTCVECVE-2026-9027: CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Improper Verification of Cryptographic Signature to Payment Bypass via /wp-json/corvuspay/success/ REST Endpointhttps://agentprime.io/advisories/CVE-2026-9027/https://agentprime.io/advisories/CVE-2026-9027/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:31:20 GMTCVE