AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-11497

HIGH · CVSS 7.5 EPSS 1.15% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-08-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References
packetstormsecurity.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2020-11497
Severity
HIGH
CVSS
7.5
EPSS
1.15%
WordPress

Original NVD Description

An issue was discovered in the NAB Transact extension 2.1.0 for the WooCommerce plugin for WordPress. An online payment system bypass allows orders to be marked as fully paid by assigning an arbitrary bank transaction ID during the payment-details entry step.