WaMate Confirm – Order Confirmation
WaMate Confirm – Order Confirmation has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for WaMate Confirm – Order Confirmation has a vendor fix available, so running the current release closes it.
All of these findings were reported by Legion Hunter. WaMate Confirm – Order Confirmation is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-1833WaMate Confirm <= 2.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Phone Number Blocking/Unblocking
Read the full analysisVulnerability Records
WaMate Confirm – Order Confirmation
Author
sm_rasmy
WaMate Confirm is a powerful plugin designed to streamline your order confirmation process by automatically sending WhatsApp notifications when orders are received on your WooCommerce store. Say goodbye to manual notifications and hello to efficient order management Hot to Use Wamate Confirm 🚀 Install and activate the WaMate confirm plugin. 🌐 Create your FREE account on beta.WaMateai.Online. 📲 Connect your WhatsApp number. 🔑 Insert the API KEY and Instance ID into the plugin. 🛠 Customize your selected notification messages. ✅ That’s it – you’re ready to boost your sales! Note: Create your FREE account now, and you will be able to send 100 messages every month for Free. privacy Policy Documentation Global Features: Seamlessly integrates with WooCommerce to ensure smooth order management. Easy setup: Simple configuration process for hassle-free installation and usage. Efficient order management: Streamline your workflow by automating order confirmation tasks.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C