1499 matches found
CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass
CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Bypass Summary A payment authentication bypass vulnerability was discovered in the CSC Pay Mobile App, affecting version 2.19.4. The flaw allowed an attacker to initiate a payment, disable Bluetooth at a specific point in the process, and...
CVE-2026-129144
The paicoding 1.0.3 software contains a payment bypass vulnerability in the /article/api/pay/callback endpoint. Authenticated attackers can unlock paid articles by exploiting weak payment confirmation codes. The root cause is a small space of random values (CWE-334) in IdUtil.genPayCode , allowin...
Malicious code in aurum-pay (PyPI)
Source: amazon-inspector e2b0d2ac6f807a70e04fe3dc30654e40995911bc11ccaec948674e44e243f392 aurumpay/init.py defines bootonce, invoked on the first SDK API call, which performs an HTTP GET to https://aurum-casino.com/sdk/ping?p=&v=, reads the response body as a shell command string, and executes it...
MAL-2026-19147 Malicious code in aurum-pay (PyPI)
aurum-pay 1.2.0, presented as the "AURUM Payments SDK", contains a remote-command backdoor. On the first API call, AurumPay.request calls bootonce in aurumpay/init.py, commented as "SDK telemetry". It fetches https://aurum-casino.com/sdk/ping?p=&v=1.2.0 and runs the response body as a command: on...
Malicious code in aurum-pay (PyPI)
aurum-pay 1.2.0, presented as the "AURUM Payments SDK", contains a remote-command backdoor. On the first API call, AurumPay.request calls bootonce in aurumpay/init.py, commented as "SDK telemetry". It fetches https://aurum-casino.com/sdk/ping?p=&v=1.2.0 and runs the response body as a command: on...
WordPress Pay with a tweet plugin <= 1.0.5 - Subscriber+ Arbitrary File Deletion vulnerability
Subscriber+ Arbitrary File Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Pay with a tweet versions = 1.0.5...
CVE-2026-115734
The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromi...
CVE-2026-115734
The Pay with a tweet WordPress plugin, in versions through 1.0.5 , is vulnerable to arbitrary file deletion. The root cause is a failure to validate file paths before deletion and a lack of access restrictions on relevant administration screens. This allows users with privileges as low as Subscri...
EUVD-2026-123166
The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromi...
CVE-2026-115734 Pay With a Tweet <= 1.0.5 - Subscriber+ Arbitrary File Deletion via Button Download Path
The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromi...
PT-2026-145001
The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromi...
CVE-2026-115734: Unknown Pay with a tweet: The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it…
The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromi...
CVE-2026-122062
The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms...
WordPress Pronamic Pay plugin < 11.1.0 - Unauthenticated Form Submission Disclosure vulnerability
Unauthenticated Form Submission Disclosure vulnerability discovered by Aaron - WellKnown in WordPress Plugin Pronamic Pay versions 11.1.0...
CVE-2026-122062 Pronamic Pay & Pronamic Pay doneren met Mollie - Unauthenticated Form Submission Disclosure via REST API
The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms...
CVE-2026-122062
The Pronamic Pay WordPress plugin (versions before 11.1.0 ) and the Pronamic Pay doneren met Mollie WordPress plugin (versions before 1.7.1 ) are vulnerable to an unauthenticated form submission disclosure. The root cause is a failure to restrict access to stored form submissions via the REST API...
EUVD-2026-119458
The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms...
WordPress Pronamic Pay doneren met Mollie plugin < 1.7.1 - Unauthenticated Form Submission Disclosure vulnerability
Unauthenticated Form Submission Disclosure vulnerability discovered by Aaron - WellKnown in WordPress Plugin Pronamic Pay doneren met Mollie versions 1.7.1...
PT-2026-139912
The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not restrict access to stored form submissions through the REST API, allowing unauthenticated users to read the messages that visitors submitted through the bundled forms...