CVE-2026-105970

The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin, affecting versions through 2.0.1 , contains a vulnerability where it fails to properly verify the authenticity of incoming bank-transfer payment notifications on a default installation. This flaw allows unauthenticated attackers to mark arb...