CVE-2026-86724 AVideo YPTWallet saveBalance.php Cross-Site Request Forgery

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...

WordPress Wallet System for WooCommerce plugin <= 2.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Wallet Balance Manipulation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Wallet Balance Manipulation vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Wallet System for WooCommerce versions = 2.7.2...

EUVD-2018-5678

Malware in sbrugna...

EUVD-2018-5683

Malware in sbrugna...

EUVD-2018-5687

Malware in sbrugna...

EUVD-2018-5710

Malware in sbrugna...

EUVD-2018-5651

Malware in sbrugna...

EUVD-2018-5664

Malware in sbrugna...

EUVD-2018-5686

Malware in sbrugna...

EUVD-2018-5628

Malware in sbrugna...

EUVD-2018-5483

Malware in sbrugna...

EUVD-2018-5484

Malware in sbrugna...

EUVD-2018-5487

Malware in sbrugna...

EUVD-2018-5506

Malware in sbrugna...

EUVD-2018-5523

Malware in sbrugna...

EUVD-2018-5534

Malware in sbrugna...

EUVD-2018-5541

Malware in sbrugna...

EUVD-2018-5548

Malware in sbrugna...

EUVD-2018-5556

Malware in sbrugna...

EUVD-2018-5568

Malware in sbrugna...