PT-2026-57038

Impact A user opens the cart page in the browser. In the background, the order gets completed, e.g. an admin changes the status, or the user finalizes payment in another tab. The browser still displays the old cart: the LiveComponent is unaware the underlying order state has changed. If the user...

WordPress RaCar Clear Cart for WooCommerce plugin <= 1.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress RaCar Clear Cart for WooCommerce plugin versions = 1.2.1. Solution No patched version available...

tickets.thefoat.com XSS vulnerability

Open Bug Bounty ID: OBB-625160 Description| Value ---|--- Affected Website:| tickets.thefoat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...