1030 matches found
CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass
CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Bypass Summary A payment authentication bypass vulnerability was discovered in the CSC Pay Mobile App, affecting version 2.19.4. The flaw allowed an attacker to initiate a payment, disable Bluetooth at a specific point in the process, and...
CVE-2026-80340 Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the secret that gates access to any order and, through it, that...
CVE-2026-5718-PR-V-EXPLO-T
CVE-2026-5718-PR-V-EXPLO-T WORDPRESS https://satoshidisk.com/pay/CRatNk...
CVE-2026-80311
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before cancelling it, allowing a user with a confirmed portal session to cancel subscriptions belonging to other...
EUVD-2026-68060
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before cancelling it, allowing a user with a confirmed portal session to cancel subscriptions belonging to other...
CVE-2026-80311 Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDOR
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before cancelling it, allowing a user with a confirmed portal session to cancel subscriptions belonging to other...
Fake Apple Pay charge brings the classic tech support scam to your phone
iPhone users are being targeted in a new tech support scam, using a fake Apple Pay notification to trick users. Tech support scams that use fake warnings to push victims into calling a phone number have been around for years, but this page has been designed specifically for phones. Instead of a...
CVE-2026-77789
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before acting on it, allowing a user with a confirmed portal session to cancel, reactivate or modify subscriptions...
EUVD-2026-66289
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before acting on it, allowing a user with a confirmed portal session to cancel, reactivate or modify subscriptions...
WordPress Stripe Payment Forms by WP Full Pay plugin < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure vulnerability
Unauthenticated Customer Portal Subscription and Billing Data Disclosure vulnerability discovered by Vaibhav Narkhede in WordPress Plugin WP Full Stripe Free versions 8.5.1...
CVE-2026-77758 Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer's subscription and billing information...
CVE-2026-77789
CVE-2026-77789 affects the Stripe Payment Forms by WP Full Pay WordPress plugin in versions before 8.5.1 . The vulnerability is a cross-customer subscription modification via IDOR (Insecure Direct Object Reference): the plugin does not verify that a subscription belongs to the customer bound to t...
CVE-2026-77758
CVE-2026-77758 affects the WP Full Stripe Free WordPress plugin (a.k.a. Stripe Payment Forms by WP Full Pay) in versions before 8.5.1 . The root cause is that the plugin does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing una...
EUVD-2026-66288
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer's subscription and billing information...
WordPress Stripe Payment Forms by WP Full Pay plugin < 8.5.1 - Cross-Customer Subscription Modification vulnerability
Cross-Customer Subscription Modification vulnerability discovered by Charles Vosburgh in WordPress Plugin WP Full Stripe Free versions 8.5.1...
CVE-2026-77789 Stripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Customer Subscription Modification via IDOR
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before acting on it, allowing a user with a confirmed portal session to cancel, reactivate or modify subscriptions...
CVE-2026-73384
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...
CVE-2026-73384 WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...