4 matches found
PT-2026-68681
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw in the billing and license activation subsystem enables remote, unauthenticated attackers to bypass payment authorization workflows. The issue stems from...
PT-2026-68648
Name of the Vulnerable Software and Affected Versions Events Made Easy WordPress plugin versions prior to 3.1.2 Description An issue exists where the payment authorization token is not bound to the specific payment record being charged. This allows unauthenticated attackers to complete a payment...
CVE-2026-2010 Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization
A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d. Impacted is the function Paid of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradePaymentService.java of the component Trade Payment Handler. The manipulatio...
