CVE-2023-28121

CVE-2023-28121 WooCommerce Payments: 未授权管理员访问漏洞利用 这个不会先发布...这是肯定的.. PoC现已发布。 它仅用于教育/研究目的！使用风险自负！...

CVE-2023-28121

CVE-2023-28121 用于在受控的WordPress/WooCommerce Payments实验室中研究CVE-2023-28121的研究笔记和辅助材料。 安全须知 仅在您拥有或已获得明确授权测试的系统上使用此材料。将易受攻击的WordPress和插件版本保留在隔离的本地实验室中。未经书面许可，不得针对第三方网站或面向互联网的系统。 内容 Отчет CVE-2023-28121.md - 俄语实验室笔记和报告。 woo-request.py - 研究过程中使用的辅助脚本。 targets.txt - 授权实验室系统的目标列表占位符。...

SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id

The SureForms plugin for WordPress is vulnerable to payment amount validation bypass in versions up to, and including, 2.5.2. The createpaymentintent AJAX handler checks if $formid 0 && !empty$blockid before calling validatepaymentamount. By sending formid=0 the default intval of a missing/zero...

WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection

WordPress Paytm Payment Gateway plugin through 2.7.3 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-45805 info: name: WordPress Payt...

Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Escalada de privilegios no autenticada Añadir usuario administrador en masa Introducción Este script usa Python3 y utiliza threading para una mejor velocidad de proceso. El script se ha actualizado a 2 versiones. V1 es la versión antigua y V2 es la...

CVE-2026-27378

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

EUVD-2026-76215

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-27378

Deposits and Partial Payments for WooCommerce (versions

CVE-2026-27378 WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-87581

A flaw was found in Google Chrome's Payments component. A remote attacker, leveraging social engineering, could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside the browser's...

CVE-2026-87558

A flaw was found in Google Chrome. This use-after-free vulnerability, specifically within the Payments component, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be exploited by tricking a user into visiting a specially crafted HTML page,...

CVE-2026-87474

A flaw was found in Google Chrome. A use-after-free vulnerability in the Payments component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by enticing a user to visit a specially crafted HTML page...

WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery

WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

WP-CVE-2023-28121

WP-CVE-2023-28121 WooCommerce Payments 5.6.2 - 未认证权限提升 Python 2.7 请我喝咖啡： 比特币 $：14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 如何使用？ 安装 Python 2.7 在此下载 python file.py 参考：https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072/...

CVE-2026-78361

The zipMoneyZip Co Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not restrict which option name a caller may supply, allowing unauthenticated users to delete arbitrary WordPress options...

CVE-2026-78361

The zipMoney (Zip Co) Payments Plugin for WooCommerce WordPress plugin versions before 2.4.0 fail to perform authorization checks on one of its front-end request handlers and do not restrict which WordPress option name a caller may supply. This allows unauthenticated users to delete arbitrary Wor...

CVE-2026-87474

Use after free in Payments in Google Chrome prior to 153.0.8010.36 all...

CVE-2026-87581

Use after free in Payments in Google Chrome prior to 153.0.8010.36 all...

CVE-2026-87615

Race condition in Payments in Google Chrome prior to 153.0.8010.36 all...

CVE-2026-87635

UI misrepresentation in Payments in Google Chrome prior to 153.0.8010...