12 matches found
CVE-2026-7533: Cross-Site Request Forgery (CSRF)
The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7. This is due to missing nonce verification in the handleoauthredirect function, which is registered on the admininit hook and processes Square OAuth tokens from ...
EUVD-2019-18969
Malware in sbrugna...
MAL-2025-28257 Malicious code in op-payment-account (npm)
The package op-payment-account was found to contain malicious code...
Malicious code in op-payment-account (npm)
The package op-payment-account was found to contain malicious code...
WordPress 插件 Stripe for WooCommerce 安全漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin Stripe for WooCommerce, which stems from a...
Uber: Chain of vulnerabilities in Uber for Business Vouchers program allows for attacker to perform arbitrary charges to victim's U4B payment account
We have determined that through a chain of 3 vulnerabilities, it is possible for any U4B user to apply credit card charges or holds to any business using the Vouchers site. These charges originate from Uber and are unsolicited by the victim business, and can be made in any amount of the attacker'...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
Cross site request forgery (csrf)
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
CVE-2019-9598
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
CVE-2019-9598: Cross-Site Request Forgery (CSRF)
An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds...
WordPress Dharma booking 2.38.3 Plugin - File Inclusion
Exploit for php platform in category web applications Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Teste...