Unknown Wava Payment Plugin

• CVE-2026-87838 Medium 6.5 Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant Credential Overwrite via Install Webhook 0.3%
• CVE-2026-87837 Medium 5.3 Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Status Change via Payment Webhook 0.2%