33 matches found
CVE-2026-61993
Unauthenticated Cross Site Scripting XSS in Blockonomics 3.11.0 versions...
EUVD-2026-112960
Unauthenticated Cross Site Scripting XSS in Blockonomics 3.11.0 versions...
CVE-2026-61993 WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Blockonomics 3.11.0 versions...
CVE-2026-61993
The WordPress Blockonomics plugin (version 3.11.0 ) is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. This flaw is categorized under CWE-79 (Improper Neutralization of Input During Web Page Generation). The vulnerability allows an attacker to execute malicious scripts ...
CVE-2026-61993 WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Blockonomics 3.11.0 versions...
WordPress Blockonomics cross-site scripting vulnerability
WordPress Blockonomics version 3.11.0 contains a cross-site scripting vulnerability caused by unauthenticated cross-site scripting attacks...
CVE-2026-61993: Blockonomics: Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.
Unauthenticated Cross Site Scripting XSS in Blockonomics 3.11.0 versions...
PT-2026-132277
Unauthenticated Cross Site Scripting XSS in Blockonomics 3.11.0 versions...
WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by mamgad in WordPress Plugin Blockonomics versions 3.11.0...
CVE-2026-35448
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page...
CVE-2026-35448
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page...
CVE-2026-35448 WWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page...
CVE-2026-35448
CVE-2026-35448 affects WWBN AVideo prior to version 27.x (plugin: BlockonomicsYPT/check.php). The endpoint accepts a Bitcoin address via GET and returns the corresponding payment order data without any authentication or access control. This enables unauthenticated disclosure of sensitive fields s...
CVE-2026-35448 WWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page...
GHSA-3V7M-QG4X-58H9 AVideo: Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php
Summary The BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page, but it performs no access control checks of its own. Since Bitco...
AVideo: Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php
Summary The BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper for the authenticated invoice.php page, but it performs no access control checks of its own. Since Bitco...
EUVD-2022-49920
Malicious code in bioql PyPI...
CVE-2022-47145
Reflected Cross-Site Scripting XSS vulnerability in Blockonomics WordPress Bitcoin Payments – Blockonomics plugin = 3.5.7 versions...