CVE-2024-50944

CVE-2024-50944 Descrizione SimplCommerce è affetto da una vulnerabilità di overflow di interi nella logica del carrello, che consente la manipolazione delle quantità di prodotto e dei prezzi totali tramite parametri di quantità artificiosi. Metodo di rilevamento Un attaccante può rilevare questa...

TERM1B1TB0T

TERMI₿IT₿OT 🤖 Uno strumento semplice che traccia le transazioni Bitcoin in tempo reale, sopra o sotto un determinato obiettivo di prezzo, utilizzando un'API websocket sul tuo terminale. PASSO DOPO PASSO: WINDOWS -Passaggio 1: Installa Python se non è già installato Download from python.org During...

CVE-2025-48129

🚨 CVE-2025-48129 - Privilegieneskalation im WordPress Spreadsheet Price Changer Plugin 🛡️ Schwachstellenzusammenfassung Betroffenes Plugin : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Betroffene Versionen : Klassifiziert unter: OWASP A7 – Identifikations- und...

CVE-2025-22510

CVE-2025-22510 1️⃣ Tipo di componente Plugin WordPress 2️⃣ Dettagli del componente Component name WC Price History for Omnibus Vulnerable version Per attivare questo plugin, il pl...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 – SQL-Injection-Schwachstelle im Parameter „npss“ in rooms.php Beschreibung : In Version 1 des Hotel Booking Management besteht eine SQL-Injection-Schwachstelle. Ein böswilliger Angreifer kann über die anfälligen Parameter npss, dpss, npsd, dpsd, npds,...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin, in versions 1.8 through 2.0.5 , is vulnerable to unauthenticated payment amount manipulation . The root cause is that the plugin fails to derive the payment amount on the server, instead relying on a client-supplied field . This allows an ...

EUVD-2026-91213

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-90987 Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

EUVD-2026-91214

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

CVE-2026-91020

The WebToffee Gift Cards for WooCommerce WordPress plugin (versions before 1.3.1 ) is vulnerable to an unauthenticated gift card amount manipulation (CWE-472). The root cause is a lack of server-side validation for the user-supplied wt_credit_amount parameter. An attacker can submit an arbitrary ...

PT-2026-104113

The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and store-credit coupon value, allowing unauthenticated users to submit an arbitrary or negative amount, bypassing the...

PT-2026-104112

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-90987: External Control of Assumed-Immutable Web Parameter

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

EUVD-2025-209816

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

PT-2026-103100

Name of the Vulnerable Software and Affected Versions Real Estate Manager – Property Listing and Agent Management versions prior to 7.4 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with subscriber-level access a...

CVE-2026-86838 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

EUVD-2026-88099

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

CVE-2026-86838 Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation

The Bookly WordPress plugin before 28.3 does not validate client-supplied booking quantity values on the server before computing the appointment total, allowing unauthenticated users to reduce the total to zero and book paid services for free while bypassing the payment step...

How Much Must a Private Mempool Hide? Exact Leakage Thresholds for Sandwich Attacks

Private and encrypted mempools hide pending transactions to stop sandwich attacks and other forms of maximal extractable value MEV, but what they hide is rarely everything: a transaction's pair, direction, and a coarse range for its size can still leak. How much leakage makes sandwiching pay? We...