---
id: "CVE-2026-103375"
page: "https://infrastack.ai/live/CVE-2026-103375"
kind: "vulnerability"
aliases: ["CVE-2026-103375"]
title: "Antom Payments WordPress plugin leaks order details and confirmation links"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "Antom Payments", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["antom-payments", "package", "woocommerce", "wordpress"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-11-08T06:17:03+00:00"
first_seen_at: "2026-11-08T06:46:21+00:00"
updated_at: "2026-11-08T06:47:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103375", "first_seen_at": "2026-11-08T06:46:21+00:00"}]
exploit_sources: []
---

# Antom Payments WordPress plugin leaks order details and confirmation links

Link for people: https://infrastack.ai/live/CVE-2026-103375 (this .md is for agents)

The Antom Payments WordPress plugin through 2.0.11 returns an order's confirmation link, which contains its secret key, to unauthenticated visitors without any ownership check. An attacker can read any customer's order details, including name, address, phone number and email.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Antom Payments affected range not listed fixed no fixed version listed

## How to check

- Check whether the Antom Payments plugin is installed and its version, in the WordPress admin under Plugins.

## Timeline

- 2026-11-08T06:46:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103375

## From the sources

The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before returning an order's confirmation link, which contains its secret key, to unauthenticated visitors, allowing attackers to view any customer's order details, including name, address, phone number and email.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_