Malicious code in epicagames-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53329bfb1e56501de94ad5d9e0627736fb16fd960066b61ed26df8e83ff5afc The OpenSSF Package Analysis project identified 'epicagames-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-451 Malicious code in epicagames-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53329bfb1e56501de94ad5d9e0627736fb16fd960066b61ed26df8e83ff5afc The OpenSSF Package Analysis project identified 'epicagames-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in bookingcom-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04d8528b3a72dfe0149492ba760d2929fc7618f835ae4dd321347b90b2292d92 The OpenSSF Package Analysis project identified 'bookingcom-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-404 Malicious code in bookingcom-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04d8528b3a72dfe0149492ba760d2929fc7618f835ae4dd321347b90b2292d92 The OpenSSF Package Analysis project identified 'bookingcom-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in dropbox-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1844c19c7cf3e5c4516bafe7182ca717bf32d84b8739bbfc011893f4a2e8ce The OpenSSF Package Analysis project identified 'dropbox-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-433 Malicious code in dropbox-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1844c19c7cf3e5c4516bafe7182ca717bf32d84b8739bbfc011893f4a2e8ce The OpenSSF Package Analysis project identified 'dropbox-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e37dfb5d2372f30e0f4c01eabdbc7b1687ba0bdcc294984072fe4cf4b5bfcc The OpenSSF Package Analysis project identified 'coinbase-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-422 Malicious code in coinbase-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e37dfb5d2372f30e0f4c01eabdbc7b1687ba0bdcc294984072fe4cf4b5bfcc The OpenSSF Package Analysis project identified 'coinbase-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-385 Malicious code in amazon-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9680dbff3b7fad0b576b1efae75268c097baf1059dc1238e024598ff9cf77028 The OpenSSF Package Analysis project identified 'amazon-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-22661 WordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vcita.com Online Payments – Get Paid with PayPal, Square & Stripe allows Stored XSS. This issue affects Online Payments – Get Paid with PayPal, Square & Stripe: from n/a through 3.20.0...

Fintech Bill Pay Platform “Willow Pays” Exposes Over 240,000 Records

Security researcher discovers a non-password-protected database containing over 240,000 records belonging to US-based FinTech bill payment platform Willow…...

MAL-2025-131 Malicious code in payment-integration-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2b48477c18dc833e42ed72d5398cea9fd403d04bb4f0c43a833f3d97068ae01 The OpenSSF Package Analysis project identified 'payment-integration-template' @ 1.1.0 npm as malicious. It is considered malicious because: - T...

Malicious code in payment-integration-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2b48477c18dc833e42ed72d5398cea9fd403d04bb4f0c43a833f3d97068ae01 The OpenSSF Package Analysis project identified 'payment-integration-template' @ 1.1.0 npm as malicious. It is considered malicious because: - T...

CVE-2024-13401

CVE-2024-13401 affects the WordPress PayPal Payment Button plugin up to version 1.2.3.35. The vulnerability is a Stored XSS in the wp_paypal_checkout shortcode caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires authenticated access at ...

CVE-2025-23804

Cross-Site Request Forgery CSRF vulnerability in Shiv Prakash Tiwari WP Service Payment Form With Authorize.net wp-service-payment-form-with-authorizenet allows Reflected XSS.This issue affects WP Service Payment Form With Authorize.net: from n/a through = 2.6.0...

CVE-2025-23804

CVE-2025-23804 is a CSRF vulnerability in the WordPress plugin WP Service Payment Form With Authorize.net that can enable a Reflected XSS . The Red Hat advisory reiterates the same CVE and describes the flaw as CSRF affecting the plugin up to version 2.6.0 . The base metrics list a CVSS v3.1 scor...

WordPress WP Service Payment Form With Authorize.net Plugin <= 2.6.0 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP Service Payment Form With Authorize.net versions = 2.6.0...

PT-2025-5104 · WordPress · Wp Service Payment Form With Authorize.Net

Name of the Vulnerable Software and Affected Versions: WP Service Payment Form With Authorize.net versions n/a through 2.6.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended...

OPEXUS FOIAXpress Public Access Link 安全漏洞

OPEXUS FOIAXpress Public Access Link OPEXUS FOIAXpress PAL is a secure public-facing web portal from OPEXUS that connects organizations with requesters and integrates with payment solutions, including payment solutions. A security vulnerability exists in OPEXUS FOIAXpress Public Access Link versi...