EUVD-2025-198535

The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create...

CVE-2025-13384

The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.56. This is due to the plugin exposing an unauthenticated IPN-like endpoint via the 'cpcontactformppipncheck' query parameter that processes payment confirmations...

CVE-2025-12752 Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation

The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create...

CVE-2025-12752 Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation

The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create...

PT-2025-47828

Name of the Vulnerable Software and Affected Versions CP Contact Form with PayPal plugin for WordPress versions through 1.3.56 Description The CP Contact Form with PayPal plugin for WordPress is susceptible to unauthorized payment confirmation. The plugin exposes an unauthenticated endpoint via t...

EUVD-2025-37973

The Easy Digital Downloads plugin for WordPress is vulnerable to Order Manipulation in all versions up to, and including, 3.5.2 due to an order verification bypass. The verification is unconditionally skipped when the POST body includes verificationoverride=1. Because this value is...

CVE-2025-11271

The CVE-2025-11271 entry concerns WordPress Easy Digital Downloads (EDD) plugin versions up to and including 3.5.2. The vulnerability is an order verification bypass: the POST parameter verification_override=1 causes the verification check to be skipped unconditionally, enabling an attacker to su...

EUVD-2012-4411

Malware in sbrugna...

Threat Outbreak Alert RuleID31201: Email Messages Distributing Malicious Software on November 8, 2017

Medium Alert ID: 55806 First Published: 2017 November 8 14:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31201 may contain the following files: Name |...

Threat Outbreak Alert RuleID24854: Email Messages Distributing Malicious Software on September 6, 2016

Medium Alert ID: 48785 First Published: 2016 September 6 19:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24854 may contain the following files: Name |...

Threat Outbreak Alert RuleID21853: Email Messages Distributing Malicious Software on March 22, 2016

Medium Alert ID: 44248 First Published: 2016 March 23 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21853 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID20786: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 43306 First Published: 2016 January 28 21:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20786 may contain the following files: Name |...

Threat Outbreak Alert RuleID16057: Email Messages Distributing Malicious Software on June 18, 2015

Medium Alert ID: 39415 First Published: 2015 June 18 20:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16057 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID13760: Email Messages Distributing Malicious Software on February 28, 2015

Medium Alert ID: 37679 First Published: 2015 March 2 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13760 may contain the following files: Name | Siz...

SA-CONTRIB-2014-050 - Commerce Postfinance ePayment - Access Bypass

The Commerce Postfinance ePayment module provides commerce payment methods for the Postfinance e-Payment service provider. The module doesn't sufficiently validate incoming payment notification IPN messages. Sending a specifically crafted IPN message to an affected site allows an attacker to crea...

Threat Outbreak Alert: Fake Bank Payment Failure Notification Email Messages on May 13, 2014

Medium Alert ID: 34209 First Published: 2014 May 13 17:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Notification Email Messages on May 6, 2014

Medium Alert ID: 34121 First Published: 2014 May 6 16:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment receipt notification for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 30, 2014

Medium Alert ID: 34021 First Published: 2014 May 1 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift payment notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Tax Payment Notification Email Messages on April 30, 2014

Medium Alert ID: 34009 First Published: 2014 April 30 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax payment notification from the Internal Revenue Service for the recipient. The text in the email message...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 11, 2014.

Medium Alert ID: 33765 First Published: 2014 April 14 15:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to convince the recipient to op...