2 matches found
PT-2026-94174
Name of the Vulnerable Software and Affected Versions Autopay WordPress plugin versions prior to 5.0.1 Description An issue exists where the plugin fails to enforce the signature on a payment callback. This allows unauthenticated users to disclose and delete stored payment parameters associated...
6.5CVSS5.7AI score0.00275EPSS
SaveExploits0References4
CVE-2025-0872
A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. It is possible to launch the attack remotely. The...
9.8CVSS6.5AI score0.00543EPSS
SaveExploits1References5
20