CVE-2026-85642

The Formidable Forms WordPress plugin (versions before 7.0 ) is vulnerable to a Denial of Service (DoS) attack because it fails to verify the identity of the caller before recording timestamps for rate limiting payment gateway verification requests . An unauthenticated attacker can exploit this f...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-85642 Formidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoS

The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification requests, allowing unauthenticated attackers to consume the daily allowance and cause legitimate verification attempts to b...

CVE-2026-16038

The MStore API WordPress plugin (versions before 4.21.0 ) is vulnerable to an unauthenticated payment bypass. The root cause is a failure to verify payments with the payment gateway across several payment-completion endpoints before marking an order as paid. An unauthenticated attacker can exploi...

CVE-2019-9010

An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of...