CVE-2026-77999

J2Store (Joomla extension by j2commerce.com) versions 1.0.0–3.3.21, 4.0.0–4.0.21, and 4.1.0–4.1.6 contain an unauthenticated PayPal callback forgery vulnerability. The IPN listener's signature check (_validateIPN()) treated UNVERIFIED and any non-INVALID response as valid, issued verification wit...

WordPress plugin Subscriptions & Memberships for PayPal 数据伪造问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery...