CVE-2026-27378

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

EUVD-2026-76215

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-27378

Deposits and Partial Payments for WooCommerce (versions

CVE-2026-27378 WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-27378 WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-87581

An use after free flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553129531...

CVE-2026-87558

An use after free flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553128689...

CVE-2026-87474

A flaw was found in Google Chrome. A use-after-free vulnerability in the Payments component could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This exploitation is possible by enticing a user to visit a specially crafted HTML page...

WordPress zipMoney(Zip Co) Payments Plugin for WooCommerce plugin < 2.4.0 - Unauthenticated Arbitrary Option Deletion vulnerability

Unauthenticated Arbitrary Option Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin zipMoneyZip Co Payments Plugin for WooCommerce versions 2.4.0...

PT-2026-90017

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-27378: Missing Authorization

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

ROS-20260911-73-0173

The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

ROS-20260911-73-0179

The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-78361

The zipMoneyZip Co Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not restrict which option name a caller may supply, allowing unauthenticated users to delete arbitrary WordPress options...

CVE-2026-78361

The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin, in versions prior to 2.4.0 , is vulnerable to unauthenticated arbitrary option deletion . This is caused by a lack of authorization checks on one of the plugin's front-end request handlers and a failure to restrict the option ...

SUSE CVE-2026-87474

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-87558

Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-87581

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-87615

Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78361: Missing Authorization

The zipMoneyZip Co Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not restrict which option name a caller may supply, allowing unauthenticated users to delete arbitrary WordPress options...