CVE-2026-16038

The MStore API WordPress plugin (versions before 4.21.0 ) is vulnerable to an unauthenticated payment bypass. The root cause is a failure to verify payments with the payment gateway across several payment-completion endpoints before marking an order as paid. An unauthenticated attacker can exploi...

CVE-2019-9010

An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of...