2453 matches found
CVE-2023-28121
CVE-2023-28121 root@kitploit: usage: CVE-2023-28121.py -h -v RHOST RPORT WooCommerce Payments WordPress plugin = 5.6.1 CVE-2023-28121 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-28121 positional arguments: RHOST remote host RPORT remote port optional arguments: -h, --help show this...
Mass-CVE-2023-28121-kdoec
CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User How to use This script using Python3. Install requirements pip install -r requirements.txt Reference https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072...
Mass-CVE-2023-28121
CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...
WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery
WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...
WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection
WordPress Paytm Payment Gateway plugin through 2.7.3 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-45805 info: name: WordPress Payt...
SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id
The SureForms plugin for WordPress is vulnerable to payment amount validation bypass in versions up to, and including, 2.5.2. The createpaymentintent AJAX handler checks if $formid 0 && !empty$blockid before calling validatepaymentamount. By sending formid=0 the default intval of a missing/zero...
CVE-2023-28121
CVE-2023-28121 WooCommerce Payments: Exploit de acceso de administrador no autorizado No publicaré este primero... eso es seguro.. El PoC ya está publicado. ¡Fue creado solo con fines educativos/de investigación! ¡Úsalo bajo tu propio riesgo!...
CVE-2023-28121
CVE-2023-28121 Notas de investigación y material auxiliar para estudiar CVE-2023-28121 en un laboratorio controlado de WordPress/WooCommerce Payments. Aviso de seguridad Utilice este material únicamente en sistemas de su propiedad o para los que tenga autorización explícita para realizar pruebas...
CVE-2026-46817
🚨 CVE-2026-46817 - Ejecución Remota de Código Crítica Oracle E-Business Suite – Oracle Payments Transmisión de Archivos Vulnerabilidad remota crítica sin autenticación que afecta a Oracle Payments Transmisión de Archivos que puede permitir el compromiso total de la aplicación a través de HTTP. 📌...
EUVD-2026-68044
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response, allowing unauthenticated attackers to redirect that request to ...
MAL-2026-15518 Malicious code in payments-ui-services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b49e2f4d16837b49ca7d82e2c5a46c2a861c3f2c3d63596c730749dfec0337 package.json line 11 declares a dependency whose source is the arbitrary HTTPS URL https://repo.securityctrl.com/payments-ui-services instead of a...
Malicious code in payments-ui-services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b49e2f4d16837b49ca7d82e2c5a46c2a861c3f2c3d63596c730749dfec0337 package.json line 11 declares a dependency whose source is the arbitrary HTTPS URL https://repo.securityctrl.com/payments-ui-services instead of a...
CVE-2023-28121-WordPress-Privilege-Escalation
🔐 CVE-2023-28121 — WordPress Privilege Escalation Exploração prática de vulnerabilidade crítica no WordPress usando o plugin WooCommerce Payments. 📌 Resumo A CVE-2023-28121 permite criar usuários administradores sem autenticação via REST API. Severidade: Crítica CVSS 9.8 Impacto: Controle total d...
Chromium: CVE-2026-79095 Information leak in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-78894 Race condition in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79042 Missing authorization in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
WP-CVE-2023-28121
WP-CVE-2023-28121 WooCommerce Payments 5.6.2 – Nicht authentifizierte Privilegieneskalation Python 2.7 Kaffee kaufen : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC Wie verwenden? Install Python 2.7 Hier herunterladen python file.py Referenz:...
CVE-2026-79042
Missing authorization in Payments in Google Chrome on on Android prior...