CVE-2026-16038

The MStore API WordPress plugin, prior to version 4.21.0, does not verify payment with the gateway before marking an order as paid on several payment-completion endpoints. This authenticated-by-impact issue allows an unauthenticated attacker to mark an arbitrary order as fully paid without paying...

CVE-2019-9010

An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of...