MAL-2025-1818 Malicious code in godaddy-payment (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1717 Malicious code in airbnb-payment (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in airbnb-payment (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1702 Malicious code in @vfx-payment/transaction-summary (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d066801593b468617494b166d230eba3bfc7df3e454f9125333718ef42f6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2029 Malicious code in accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d066801593b468617494b166d230eba3bfc7df3e454f9125333718ef42f6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-sample-accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04df90b1271528e15250574cc47ddead22c380a340572cb7ac29550a1c69a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accept-a-payment-playwright-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a7c8fcfc301cd02159a59241fc90d212ace8d247570cbdd7b66adffd6579d05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Bitcoin / AltCoin Payment Gateway for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Bitcoin / AltCoin Payment...

ESP-Miner 跨站请求伪造漏洞

ESP-Miner is an ESP32 bitcoin-related program by Skot Individual Developers. A security vulnerability exists in ESP-Miner versions prior to 2.5.0. An attacker exploiting the vulnerability could modify the payment address or frequency and voltage settings...

WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop plugin <= 1.7.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Bitcoin / AltCoin Payment Gateway for WooCommerce versions = 1.7.6...

Malicious code in ideal-paypal-payment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0c63436afa43460fe75374c026568d5b5f17a29326ac24517be8a2b1dcd113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1598 Malicious code in ideal-paypal-payment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0c63436afa43460fe75374c026568d5b5f17a29326ac24517be8a2b1dcd113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How Payment Orchestration Enhances Business Efficiency

Payment Orchestration Platforms streamline transactions by routing payments through multiple providers, reducing costs, boosting approval rates, and enhancing…...

CVE-2024-13798

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient verification on form fields. This makes it possible for unauthenticated attackers to create new orders for...

CVE-2024-13798

CVE-2024-13798: Post Grid and Gutenberg Blocks – ComboBlocks for WordPress allows unauthenticated users to create orders and mark them paid due to insufficient form verification. Affected versions: all up to 2.3.5. Patch available: update to 2.3.5 (or newer) to remediate.

CVE-2024-13798 Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient verification on form fields. This makes it possible for unauthenticated attackers to create new orders for...

WordPress plugin Post Grid and Gutenberg Blocks – ComboBlocks 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... WordPress plugin Post Grid and...

Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers

Cybersecurity researchers have flagged a credit card stealing malware campaign that has been observed targeting e-commerce sites running Magento by disguising the malicious content within image tags in HTML code in order to stay under the radar. MageCart is the name given to a malware that's...

CVE-2025-22209

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands via the 'searchpaymentstatus' parameter in the Employer Payment History search feature...