WordPress LatePoint plugin < 5.7.5 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Filip Kowalski in WordPress Plugin LatePoint versions 5.7.5...

WordPress Simple Shopping Cart plugin < 5.3.3 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Simple Shopping Cart versions 5.3.3...

CVE-2026-105256

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed...

CVE-2026-105256 LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed...

CVE-2026-105256 LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' Parameter

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed...

CVE-2026-105256

The LatePoint WordPress plugin, in versions prior to 5.7.5 , is vulnerable to an unauthenticated payment bypass . The root cause is a failure to validate the client-supplied 'payment_portion' parameter against allowed service amounts. An unauthenticated visitor can manipulate this value to make t...

CVE-2026-104641 Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the site owner's PayPal account in its default configuration, allowing unauthenticated attackers to have their orders marked as paid using a payment made to an...

CVE-2026-104641

The Simple Shopping Cart WordPress plugin, version prior to 5.3.3 , is vulnerable to an unauthenticated payment bypass . In its default configuration, the plugin fails to verify that a PayPal IPN (Instant Payment Notification) corresponds to a payment received by the site owner's specific account...

CVE-2026-104641 Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the site owner's PayPal account in its default configuration, allowing unauthenticated attackers to have their orders marked as paid using a payment made to an...

PT-2026-120502

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed...

PT-2026-117238

The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...

CVE-2026-110527 WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass

The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment...

CVE-2026-110527

The WP User Manager WordPress plugin, in versions prior to 2.9.20 , contains a vulnerability where it fails to roll back a WordPress account created during payment-gated registration if the subsequent payment step fails. This flaw allows unauthenticated users to successfully create functional acc...

CVE-2026-110527 WP User Manager 2.9 - 2.9.19 - Unauthenticated Account Creation via Stripe Registration Payment Bypass

The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment...

EUVD-2026-102197

Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders, but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType an...

CVE-2026-77466 Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders, but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType an...

CVE-2026-77466

The photo-management tool Lychee (prior to version 7.7.0 ) contains a payment bypass vulnerability in its webshop. The root cause is improper input validation in CreateSessionRequest, which fails to enforce OmnipayProviderType::isAllowed() and only checks if the submitted provider is a valid Omni...

CVE-2026-77466 Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders, but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType an...

CVE-2026-110607 BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request...

WordPress Asaas Gateway for WooCommerce plugin < 2.7.8 - Unauthenticated Order Payment Bypass vulnerability

Unauthenticated Order Payment Bypass vulnerability discovered by Guillermo Álvarez Fernández in WordPress Plugin Asaas Gateway for WooCommerce versions 2.7.8...