CVE-2021-26786

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php...

PT-2021-17132

Name of the Vulnerable Software and Affected Versions PlayTube affected versions not specified Description An issue was discovered in PlayTube, allowing authenticated attackers to execute arbitrary code via the purchase code to the config.php. Recommendations At the moment, there is no informatio...

CVE-2021-26786: Undefined Security Weakness

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php...

MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple

The plugin had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address. The plugin must have a valid purchase code for the request to work curl -X GET --header 'Content-Type: application/json' --header 'Accept:...