7957 matches found
WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by ? in WordPress Plugin Simple Payment versions = 2.4.6...
CVE-2025-61080
A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...
CVE-2025-62516
Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...
EUVD-2025-36545
A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...
CVE-2025-61080
A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...
Social Engineering People’s Credit Card Details
Good Wall Street Journal article on criminal gangs that scam people out of their credit card information: Your highway toll payment is now past due, one text warns. You have U.S. Postal Service fees to pay, another threatens. You owe the New York City Department of Finance for unpaid traffic...
PT-2025-44197
Name of the Vulnerable Software and Affected Versions Clear2Pay Bank Visibility Application - Payment Execution version 1.10.0.104 Description A reflected Cross-Site Scripting XSS issue exists. The issue is due to improper input validation in the application. Specifically, the ID parameter within...
CVE-2025-61080
A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...
CVE-2025-61080
A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...
Clear2Pay Bank Visibility Application – Payment Execution Security Vulnerability
Clear2Pay Bank Visibility Application - Payment Execution is a financial software component from Clear2Pay Belgium. A security vulnerability exists in Clear2Pay Bank Visibility Application - Payment Execution version 1.10.0.104, which originates from an unvalidated ID parameter in the URL and cou...
CVE-2025-61080: Improper Neutralization of Input During Web Page Generation
A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...
CVE-2025-61080
The Clear2Pay Bank Visibility Application - Payment Execution version 1.10.0.104 is vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The root cause is improper input validation and lack of sanitization of the ID parameter within the URL. An attacker can exploit this by injectin...
CVE-2025-62516 Landlord Onboarding & Rental Signup Unauthorized Access Vulnerability in TurboTenant Stripe Integration
Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...
EUVD-2025-36366
Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...
CVE-2025-62516
CVE-2025-62516 entry rejected; not an active vulnerability.
nsKnox Launches Adaptive Payment Security™, Revolutionizing B2B Fraud Prevention by Solving the ‘Impossible Triangle’ of Speed, Certainty, and Effort
New York, New York, USA, 27th October 2025, CyberNewsWire...
CVE-2025-9322
The Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress is vulnerable to SQL Injection via the 'wpfs-form-name' parameter in all versions up to, and including, 8.3.1 due to insufficient escaping on the user supplied parameter and lack ...
CVE-2025-11564
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhook signatures on the "verifyAndCreateOrderData" function in all versions up to, and including, 3.8.3. This makes it...
WordPress plugin Tutor LMS has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...