Accept Donations with PayPal <= 1.5.2 - Open Redirect

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.5.2. This is due to insufficient validation on the redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially...

WordPress Quick Event Manager plugin 9.9.5-9.18 - Unauthenticated PayPal IPN Verification Bypass vulnerability

Unauthenticated PayPal IPN Verification Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Quick Event Manager versions 9.9.5-9.18...

CVE-2026-121636

The Quick Event Manager WordPress plugin before 9.19 does not verify the authenticity of PayPal payment notifications before marking event registrations as paid, which could allow unauthenticated attackers to mark registrations as paid without making a payment...

EUVD-2026-117974

The Quick Event Manager WordPress plugin before 9.19 does not verify the authenticity of PayPal payment notifications before marking event registrations as paid, which could allow unauthenticated attackers to mark registrations as paid without making a payment...

CVE-2026-121636

The Quick Event Manager WordPress plugin (versions 9.9.5 through 9.18) contains a vulnerability where it fails to verify the authenticity of PayPal payment notifications . This flaw is triggered via the 'debug' parameter , allowing unauthenticated attackers to bypass IPN verification and mark eve...

CVE-2026-121636 Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter

The Quick Event Manager WordPress plugin before 9.19 does not verify the authenticity of PayPal payment notifications before marking event registrations as paid, which could allow unauthenticated attackers to mark registrations as paid without making a payment...

EUVD-2026-117973

The Order Tracking WordPress plugin before 3.6.0 does not verify that a PayPal payment notification was sent to the merchant's account, or that its amount matches the order total, before marking an order as paid, which could allow unauthenticated attackers to mark arbitrary orders as paid using a...

CVE-2026-121633

The Order Tracking WordPress plugin, prior to version 3.6.0 , is vulnerable to an unauthenticated payment confirmation forgery via the PayPal IPN Listener . The root cause is a failure to verify that PayPal payment notifications were sent to the merchant's account or that the transaction amount m...

CVE-2026-121633 Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Listener

The Order Tracking WordPress plugin before 3.6.0 does not verify that a PayPal payment notification was sent to the merchant's account, or that its amount matches the order total, before marking an order as paid, which could allow unauthenticated attackers to mark arbitrary orders as paid using a...

CVE-2026-101166

The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products...

EUVD-2026-116759

The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products...

PT-2026-137296

The AlternativeCommerce PayPal Checkout module provides an AlternativeCommerce method to embed payment services from PayPal. The module does not sufficiently validate incoming PayPal webhook requests. An unauthenticated attacker can submit a crafted request that references a payment record, causi...

CVE-2026-120538

The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all versions up to, and including, 3.7.2. During a PayPal guest checkout, the email address entered in the guest-checkout field is trusted as proof of identity:...

EUVD-2026-115672

The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all versions up to, and including, 3.7.2. During a PayPal guest checkout, the email address entered in the guest-checkout field is trusted as proof of identity:...

CVE-2026-120538 Easy Digital Downloads <= 3.7.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Guest Checkout Email Binding at PayPal Capture

The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all versions up to, and including, 3.7.2. During a PayPal guest checkout, the email address entered in the guest-checkout field is trusted as proof of identity:...

CVE-2026-120538

The Easy Digital Downloads plugin for WordPress is vulnerable to an authentication bypass in all versions up to and including 3.7.2 . The root cause lies in the edd_get_purchase_form_user() function, which binds guest orders to existing WordPress users based solely on an email-address match. Duri...

PT-2026-136007

Name of the Vulnerable Software and Affected Versions Easy Digital Downloads versions prior to 3.7.3 Description An authentication bypass exists that allows an unauthenticated attacker to take over an administrator account. During a PayPal guest checkout, the system trusts the email address enter...

Exploit for CVE-2026-86596

CVE-2026-86596 PoC Single-file Python PoC for the s2Member...

CVE-2026-73316

CVE-2026-73316: PayPal webhook replay XenForo before 2.3.13 processes the same valid PayPal REST webhook more than once. What happens The PayPal REST provider overrides XenForo's base transaction validator but omits its duplicate transaction-log lookup. The database index is also non-unique. Two...

CVE-2026-73315

CVE-2026-73315: SSRF through PayPal certificate URL XenForo before 2.3.13 fetches the certificate URL supplied by a PayPal REST webhook without restricting its destination. What happens The callback handler passes PAYPAL-CERT-URL to XenForo's trusted HTTP reader. It does not require a PayPal...