MAL-2025-492 Malicious code in iberia-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df55c90f71da02d24eeb4696aa783de823c705d9f771521b950cafdb2a537c03 The OpenSSF Package Analysis project identified 'iberia-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df55c90f71da02d24eeb4696aa783de823c705d9f771521b950cafdb2a537c03 The OpenSSF Package Analysis project identified 'iberia-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-505 Malicious code in instacart-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 873edad68d1d7687dd48205c5e670bcada0b9b13ff27bc030b145c8669257904 The OpenSSF Package Analysis project identified 'instacart-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in epicagames-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53329bfb1e56501de94ad5d9e0627736fb16fd960066b61ed26df8e83ff5afc The OpenSSF Package Analysis project identified 'epicagames-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-451 Malicious code in epicagames-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53329bfb1e56501de94ad5d9e0627736fb16fd960066b61ed26df8e83ff5afc The OpenSSF Package Analysis project identified 'epicagames-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in bookingcom-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04d8528b3a72dfe0149492ba760d2929fc7618f835ae4dd321347b90b2292d92 The OpenSSF Package Analysis project identified 'bookingcom-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-404 Malicious code in bookingcom-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04d8528b3a72dfe0149492ba760d2929fc7618f835ae4dd321347b90b2292d92 The OpenSSF Package Analysis project identified 'bookingcom-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in dropbox-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1844c19c7cf3e5c4516bafe7182ca717bf32d84b8739bbfc011893f4a2e8ce The OpenSSF Package Analysis project identified 'dropbox-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-433 Malicious code in dropbox-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1844c19c7cf3e5c4516bafe7182ca717bf32d84b8739bbfc011893f4a2e8ce The OpenSSF Package Analysis project identified 'dropbox-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e37dfb5d2372f30e0f4c01eabdbc7b1687ba0bdcc294984072fe4cf4b5bfcc The OpenSSF Package Analysis project identified 'coinbase-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-422 Malicious code in coinbase-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e37dfb5d2372f30e0f4c01eabdbc7b1687ba0bdcc294984072fe4cf4b5bfcc The OpenSSF Package Analysis project identified 'coinbase-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-385 Malicious code in amazon-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-22661 WordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vcita.com Online Payments – Get Paid with PayPal, Square & Stripe allows Stored XSS. This issue affects Online Payments – Get Paid with PayPal, Square & Stripe: from n/a through 3.20.0...

Fintech Bill Pay Platform “Willow Pays” Exposes Over 240,000 Records

Security researcher discovers a non-password-protected database containing over 240,000 records belonging to US-based FinTech bill payment platform Willow…...

MAL-2025-131 Malicious code in payment-integration-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2b48477c18dc833e42ed72d5398cea9fd403d04bb4f0c43a833f3d97068ae01 The OpenSSF Package Analysis project identified 'payment-integration-template' @ 1.1.0 npm as malicious. It is considered malicious because: - T...

Malicious code in payment-integration-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2b48477c18dc833e42ed72d5398cea9fd403d04bb4f0c43a833f3d97068ae01 The OpenSSF Package Analysis project identified 'payment-integration-template' @ 1.1.0 npm as malicious. It is considered malicious because: - T...

CVE-2024-13401

CVE-2024-13401 affects the WordPress PayPal Payment Button plugin up to version 1.2.3.35. The vulnerability is a Stored XSS in the wp_paypal_checkout shortcode caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authenticated access at ...

CVE-2025-23804

Cross-Site Request Forgery CSRF vulnerability in Shiv Prakash Tiwari WP Service Payment Form With Authorize.net wp-service-payment-form-with-authorizenet allows Reflected XSS.This issue affects WP Service Payment Form With Authorize.net: from n/a through = 2.6.0...

CVE-2025-23804

CVE-2025-23804 is a CSRF vulnerability in the WordPress plugin WP Service Payment Form With Authorize.net that can enable a Reflected XSS . The Red Hat advisory reiterates the same CVE and describes the flaw as CSRF affecting the plugin up to version 2.6.0 . The base metrics list a CVSS v3.1 scor...