2 matches found
WordPress Autopay plugin < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion vulnerability
Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion vulnerability discovered by Artus KG in WordPress Plugin Autopay versions 5.0.1...
5.8AI score0.00164EPSS
SaveExploits0References1Affected Software1
CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...
9.2CVSS0.00421EPSS
SaveExploits0References2
20