Clever Phishing Scam Uses Legitimate PayPal Messages

Brian Krebs is reporting on a clever PayPal phishing scam that uses legitimate PayPal messaging. Basically, the scammers use the PayPal invoicing system to send the email. The email lists a phone number to dispute the charge, which is not PayPal and quickly turns into a request to download and...

PayPal Phishing Scam Uses Invoices Sent Via PayPal

Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge. The missives -- which come from Paypal.com and include a link at Paypal.com that displays an invoice for the supposed transaction -- state that the users account is about to ...

CVE-2022-36284

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...

CVE-2022-36284

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...

Design/Logic Flaw

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...

CVE-2022-36284

CVE-2022-36284 involves the StoreApps Affiliate For WooCommerce premium plugin (

CVE-2022-36284 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...

CVE-2022-36284 WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin = 4.7.0 at WordPress allows an attacker to change the PayPal email. WooCommerce PayPal Payments plugin free should be at least installed to get the extra input field on the user profile page...

PT-2022-23290 · Storeapps · Storeapps Affiliate For Woocommerce

Name of the Vulnerable Software and Affected Versions: StoreApps Affiliate For WooCommerce premium plugin versions = 4.7.0 Description: The issue allows an attacker to change the PayPal email due to an authenticated IDOR vulnerability. This can be exploited when the WooCommerce PayPal Payments...

WordPress plugin StoreApps Affiliate For WooCommerce premium 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

MAL-2022-5437 Malicious code in pplogger-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f79d96a39bd0701b0be053e0cad25703bda81b63b17638a10a26a1e023a91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pplogger-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f79d96a39bd0701b0be053e0cad25703bda81b63b17638a10a26a1e023a91d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Affiliate For WooCommerce < 4.8.0 - Subscriber+ Paypal Email Update via IDOR

The plugin allows users with a role as low as subscriber to change the PayPal Email via an IDOR attack when the WooCommerce PayPal Payments plugin is also installed...

WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change

Authenticated IDOR vulnerability leading to PayPal email change discovered by Vlad Vector Patchstack in WordPress Affiliate For WooCommerce premium plugin versions = 4.7.0. Solution Update the WordPress Affiliate For WooCommerce plugin to the latest available version at least 4.8.0...

MAL-2022-3740 Malicious code in hyperwallet-sdk-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c07de9253a4872758b8cb7ec4ec1694ce3105498eef8312573d0eb7ff5daeb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hyperwallet-sdk-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c07de9253a4872758b8cb7ec4ec1694ce3105498eef8312573d0eb7ff5daeb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A week in security (July 18 – July 24)

Last week on Malwarebytes Labs: Extortionists target restaurants, demand money to take down bad reviews The FTC will go after companies misusing location, health, and other sensitive data Roblox breached: Internal documents posted online by unknown attackers Warning for WordPress admins: Uninstal...

Malicious code in dw-header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece43619e69dba03ea7cc723377c5703397137721c477107801e86416e5886dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da5be3a517c6f144ce8734be431baf81817e0f85b242541003083b3e26a1ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3580 Malicious code in header-footer-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9da5be3a517c6f144ce8734be431baf81817e0f85b242541003083b3e26a1ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...