EUVD-2023-46295

Malicious code in bioql PyPI...

CVE-2023-41803

Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0...

Malicious code in bitpay-push-notification-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff585151e0d20f0a3114337d0053b2fa14d0b74c758b8d3a60f9645028bba9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3679 Malicious code in bitpay-push-notification-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff585151e0d20f0a3114337d0053b2fa14d0b74c758b8d3a60f9645028bba9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41803

Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0...

CVE-2023-41803 WordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce bitpay-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through = 4.1.0...

CVE-2023-41803 WordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BitPay Checkout for WooCommerce: from n/a through 4.1.0...

WordPress plugin BitPay Checkout for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Malicious code in BitPay-Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4310 Malicious code in BitPay-Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

BitPay Checkout for WooCommerce < 5.0.0 - Missing Authorization

Description The BitPay Checkout for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on an unknown function in versions up to, and including, 4.1.0. This makes it possible for unauthenticated attackers to perform an unauthorized...

WordPress BitPay Checkout for WooCommerce Plugin <= 4.1.0 is vulnerable to Broken Access Control

Software BitPay Checkout for WooCommerce Type Plugin Vulnerable versions = 4.1.0 Fixed in 5.0.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41803 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 47a5398f9fa9 Credits Mika Required...

Malicious code in pay-with-bitpay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6ebb5b5e2e2c9c966ed6bc7d57b453bf509a83fba50883992e0cd8b8773deb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5234 Malicious code in pay-with-bitpay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6ebb5b5e2e2c9c966ed6bc7d57b453bf509a83fba50883992e0cd8b8773deb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitpay-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c65a1f5a2711ae665b870cf63ffa85839dffa1c1acff19b1dad0fc07233dd05b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1594 Malicious code in bitpay-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c65a1f5a2711ae665b870cf63ffa85839dffa1c1acff19b1dad0fc07233dd05b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitpay-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b359ec43ede6545e2db9641843726e67e66badd464b4f6c14f6f8f8c100615d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1595 Malicious code in bitpay-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b359ec43ede6545e2db9641843726e67e66badd464b4f6c14f6f8f8c100615d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rogue Developer Infects Widely Used NodeJS Module to Steal Bitcoins

A widely used third-party NodeJS module with nearly 2 million downloads a week was compromised after one of its open-source contributor gone rogue, who infected it with a malicious code that was programmed to steal funds stored in Bitcoin wallet apps. The Node.js library in question is...

insight.bitpay.com XSS vulnerability

Open Bug Bounty ID: OBB-636340 Description| Value ---|--- Affected Website:| insight.bitpay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...