EUVD-2025-37078

Malicious code in epic-web-payment-management-sandbox npm...

MAL-2025-49215 Malicious code in epic-web-payment-management-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2a637c997d0c062d35fd3313a767575ff60d8a80c64b305621e371c9af2525 The package epic-web-payment-management-sandbox was found to contain malicious code...

WordPress Simple Payment plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ? in WordPress Plugin Simple Payment versions = 2.4.6...

WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by ? in WordPress Plugin Simple Payment versions = 2.4.6...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

CVE-2025-62516

Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...

EUVD-2025-36545

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

Social Engineering People’s Credit Card Details

Good Wall Street Journal article on criminal gangs that scam people out of their credit card information: Your highway toll payment is now past due, one text warns. You have U.S. Postal Service fees to pay, another threatens. You owe the New York City Department of Finance for unpaid traffic...

Clear2Pay Bank Visibility Application - Payment Execution 安全漏洞

Clear2Pay Bank Visibility Application - Payment Execution is a financial software component from Clear2Pay Belgium. A security vulnerability exists in Clear2Pay Bank Visibility Application - Payment Execution version 1.10.0.104, which originates from an unvalidated ID parameter in the URL and cou...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

CVE-2025-61080

The CVE-2025-61080 entry documents a reflected Cross-Site Scripting (XSS) vulnerability in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104, exploitable via the URL ID parameter. Root cause: unvalidated/sanitization-free ID parameter leading to script injection. Impact: potent...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

PT-2025-44197

Name of the Vulnerable Software and Affected Versions Clear2Pay Bank Visibility Application - Payment Execution version 1.10.0.104 Description A reflected Cross-Site Scripting XSS issue exists. The issue is due to improper input validation in the application. Specifically, the ID parameter within...

CVE-2025-62516

...

CVE-2025-62516

CVE-2025-62516 entry rejected; not an active vulnerability.

EUVD-2025-36366

Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...

CVE-2025-62516 Landlord Onboarding & Rental Signup Unauthorized Access Vulnerability in TurboTenant Stripe Integration

Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...

nsKnox Launches Adaptive Payment Security™, Revolutionizing B2B Fraud Prevention by Solving the ‘Impossible Triangle’ of Speed, Certainty, and Effort

New York, New York, USA, 27th October 2025, CyberNewsWire...

CVE-2025-9322

The Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress is vulnerable to SQL Injection via the 'wpfs-form-name' parameter in all versions up to, and including, 8.3.1 due to insufficient escaping on the user supplied parameter and lack ...