CVE-2026-126543

WWBN AVideo versions up to and including 29.7.1 are vulnerable to an improper payment verification vulnerability in the plugin/PayPalYPT/ipnV2.php component. The flaw allows unauthenticated attackers to credit wallets by forwarding genuine VERIFIED recurring-payment IPNs from their own PayPal acc...