CVE-2026-80311

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before cancelling it, allowing a user with a confirmed portal session to cancel subscriptions belonging to other...

CVE-2026-16600

The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching it server-side, allowing users with subscriber-level access and above to make the site retrieve arbitrary internal or external...

EUVD-2026-68060

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before cancelling it, allowing a user with a confirmed portal session to cancel subscriptions belonging to other...

CVE-2026-80311 Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before cancelling it, allowing a user with a confirmed portal session to cancel subscriptions belonging to other...

CVE-2026-16600 SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_image

The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching it server-side, allowing users with subscriber-level access and above to make the site retrieve arbitrary internal or external...

adversary_emulation_library

Libreria di Emulazione degli Avversari In collaborazione con i partecipanti del Centro, il MITRE Center for Threat-Informed Defense Centro mantiene una libreria di piani di emulazione degli avversari per consentire alle organizzazioni di valutare le proprie capacità difensive contro le minacce...

433Screen-SignalHacker

433Screen-SignalHacker Stato del progetto: Questo repository è un prototipo più vecchio di hacking di segnali a 433 MHz. È stato sostituito da EMWaver , la piattaforma di esplorazione hardware di Continual MI, che a sua volta è stata ritirata e archiviata a luglio 2026. L'intera storia di EMWaver...

Malicious code in mfa-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afbd77114dc45ac9259720ffd355659d0442c917aff5a734d9ea0ca337cba77 On require'mfa-js', lib/cache.js executes a Windows-gated IIFE that downloads a JavaScript payload from...

MAL-2026-15492 Malicious code in mfa-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afbd77114dc45ac9259720ffd355659d0442c917aff5a734d9ea0ca337cba77 On require'mfa-js', lib/cache.js executes a Windows-gated IIFE that downloads a JavaScript payload from...

Malicious code in eip712-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb8d4640ca63919533ea826766c735fb8a8bdf8501bb33187ae30f905d82fc2 index.js contains an IIFE that fires on require and walks the installer's home and project directories collecting.env files filtered by...

MAL-2026-15491 Malicious code in eip712-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb8d4640ca63919533ea826766c735fb8a8bdf8501bb33187ae30f905d82fc2 index.js contains an IIFE that fires on require and walks the installer's home and project directories collecting.env files filtered by...

Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackru7mfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0881c571357484f968c509c3f05f0e3c49536125c0a71c5dc7e1efae558ef109 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackt3wr5f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4a05b3c271fb16cbc32b977d3ec79f995e775a5c1a3d1583387784a8d8e2ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14791 Malicious code in 3layerdipstackjsuvtk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7b60734ee5f3f5596286c56fd8a733d82214462041d72a5b539b63601542f3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14716 Malicious code in 3layerdipstackcyqc7o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dac81f6b14c5ca28b7efb9aaaf366235cc732f031f8b2900f32b285519fc1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14827 Malicious code in 3layerdipstackm7mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac848ba661287ba28da0b3cc4784738bad4003683b89af912b65cdc636db9b5c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackcyqc7o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dac81f6b14c5ca28b7efb9aaaf366235cc732f031f8b2900f32b285519fc1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...