Unknown Wava Payment Plugin vulnerabilities

• unknown wava payment plugin Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook CVE-2026-87838 6.5 MediumOctober 21, 2026
• unknown wava payment plugin Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook CVE-2026-87837 5.3 MediumOctober 21, 2026