CVE-2025-2883 Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure

The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive...

CVE-2025-2883

CVE-2025-2883 affects the WordPress plugin Accept SagePay Payments Using Contact Form 7. Exposed phpinfo.php in all versions up to 2.0 can leak potentially sensitive information publicly; exploitation would be unauthenticated. Wordfence lists this CVE as patched in its monitoring, and connected s...

PT-2025-15415

Name of the Vulnerable Software and Affected Versions: Accept SagePay Payments Using Contact Form 7 plugin for WordPress versions 2.0 and earlier Description: The issue allows unauthenticated attackers to view potentially sensitive information contained in an exposed file through the publicly...

WordPress plugin: Vulnerability in Accepting SagePay Payments Using Contact Form 7 leads to information leakage

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress plugin Accept...

CVE-2025-2883: Exposure of Sensitive Information to an Unauthorized Actor

The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive...

WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin CardGate Payments for WooCommerce versions = 3.2.1...

MAL-2025-3112 Malicious code in payoutsapiserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3138bfa1642d8493a633368a78332106126b9c776849c8525ab1fc491544935c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-28942

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Trust Payments Trust Payments Gateway for WooCommerce trust-payments-hosted-payment-pages-integration allows SQL Injection.This issue affects Trust Payments Gateway for WooCommerce: from n/a throug...

CVE-2025-30073

An issue was discovered in OPC cardsystems Webapp Aufwertung 2.1.0. The reference assigned to transactions can be reused. When completing a payment, the first or all transactions with the same reference are completed, depending on timing. This can be used to transfer more money onto employee card...

CVE-2025-28942

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Trust Payments Trust Payments Gateway for WooCommerce trust-payments-hosted-payment-pages-integration allows SQL Injection.This issue affects Trust Payments Gateway for WooCommerce: from n/a throug...

CVE-2025-28942 WordPress Trust Payments Gateway for WooCommerce plugin <= 1.1.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Trust Payments Trust Payments Gateway for WooCommerce trust-payments-hosted-payment-pages-integration allows SQL Injection.This issue affects Trust Payments Gateway for WooCommerce: from n/a throug...

CVE-2025-28942

CVE-2025-28942 describes an SQL injection in the WordPress plugin “Trust Payments Gateway for WooCommerce” affecting versions up to 1.1.4. The vulnerability is categorized as a severe SQL injection with CVSS v3.1 base score 9.3 (CRITICAL); attack vector: NETWORK, complexity: LOW, privileges requi...

CVE-2025-28942 WordPress Trust Payments Gateway for WooCommerce plugin <= 1.1.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Trust Payments Trust Payments Gateway for WooCommerce trust-payments-hosted-payment-pages-integration allows SQL Injection.This issue affects Trust Payments Gateway for WooCommerce: from n/a throug...

Security Bulletin: Financial Transaction Manager for Digital Payments, High Value Payments and Corporate Payment Services are impacted by multiple vulnerabilities.

Summary The vulnerabilities addressed include access control, sensitive information disclosure, cross site scripting and directory traversal. Vulnerability Details CVEID:CVE-2020-5002 DESCRIPTION: IBM Financial Transaction Manager could allow an authenticated user to perform unauthorized actions...

CVE-2025-28942: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Trust Payments Trust Payments Gateway for WooCommerce trust-payments-hosted-payment-pages-integration allows SQL Injection.This issue affects Trust Payments Gateway for WooCommerce: from n/a throug...

PT-2025-12968

Name of the Vulnerable Software and Affected Versions Trust Payments Gateway for WooCommerce versions 1.1.4 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

WordPress plugin Trust Payments Gateway for WooCommerce has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

Malware in mindbody-payments

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2689 Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...