TERM1B1TB0T

TERMI₿IT₿OT 🤖 Una herramienta básica que rastrea transacciones de Bitcoin en tiempo real por encima o por debajo de un objetivo de precio particular usando una API websocket en tu terminal. PASO A PASO: WINDOWS -Paso 1: Instalar Python si no está instalado aún Download from python.org Durante la...

CVE-2024-50944

CVE-2024-50944 説明 SimplCommerceはカートロジックに整数オーバーフローの脆弱性があり、細工された数量パラメータを介して商品の数量と合計価格を操作される可能性があります。 検出方法 攻撃者は、数量2,147,483,647で商品をカートに追加し、さらに1つ追加することでこの脆弱性を検出できます。数量と合計価格が負の値になれば、サイトが整数オーバーフローに対して脆弱であることが確認されます。 テスト環境 230310c8d7a0408569b292c5a805c459d47a1d8f commit リンク https://www.simplcommerce.com...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

EUVD-2026-91213

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-91020

The WebToffee Gift Cards for WooCommerce WordPress plugin (versions before 1.3.1 ) is vulnerable to an unauthenticated gift card amount manipulation (CWE-472). The root cause is a lack of server-side validation for the user-supplied wt_credit_amount parameter. An attacker can submit an arbitrary ...

EUVD-2026-91214

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

CVE-2026-90987 Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin, in versions 1.8 through 2.0.5 , is vulnerable to unauthenticated payment amount manipulation . The root cause is that the plugin fails to derive the payment amount on the server, instead relying on a client-supplied field . This allows an ...

PT-2026-104112

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

PT-2026-104113

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

CVE-2025-48129

🚨 CVE-2025-48129 - WordPress Spreadsheet Price Changer プラグインにおける権限昇格 🛡️ 脆弱性概要 影響を受けるプラグイン : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light 脆弱性のあるバージョン : 分類: OWASP A7 – 識別と認証の失敗 🧪 エクスプロイトスクリプト概要...

EUVD-2025-209816

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

CVE-2025-22510

CVE-2025-22510 1️⃣ 组件类型 WordPress 插件 2️⃣ 组件详情 组件名称 WC Price History for Omnibus 受影响版本 要激活此插件，必须首先安装并激活 WooCommerce 插件。 2. 要测试 PHP 对象注入漏洞，请将以下 PoCPOPChainObject 类添加到 wp-config.php 文件的末尾。 class PoCPOPChainObject public $message = ""; public function destruct echo "Success PoP Chain"; echo ""; echo...

CVE-2026-86838 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

CVE-2026-86838 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

EUVD-2026-88099

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - rooms.php 中“npss”参数的SQL注入漏洞 描述 : Hotel Booking Management 1.0版本存在SQL注入漏洞。恶意攻击者可以通过编辑房型价格和折扣时使用易受攻击的参数npss、dpss、npsd、dpsd、npds、dpds、npdd、dpdd、npdst或dpdst，向MySQL数据库发送SQL命令。 受影响的产品版本 : Hotel Booking Management v1.0 CVE作者 : Geraldo Alcântara 日期 :...

PT-2026-98358

Name of the Vulnerable Software and Affected Versions Link Library versions prior to 7.9.6 Description Insufficient escaping of parameters used in the addresses of links generated on front-end directory pages allows Reflected Cross-Site Scripting XSS. This occurs via the link tags and link price...

EUVD-2026-85061

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level access and above to create, modify and delete arbitrary post meta on any post, including WooCommerce products, regardless ...

EUVD-2026-85025

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the gateway charge, allowing unauthenticated users to pay an arbitrary reduced amount for a fixed-price item...