PT-2026-107995

pH7Builder pH7 Social Dating CMS before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set item number, cart order id, or the PayPal custom field...

MLS Property Finder Improper Access Control Vulnerability

MLS Property Finder has Improper Access Control Vulnerability. The website CMS does not restrict access to the "/update" path to a registered member. A registered member can access into the Website CMS Manager and Managing the Website through "/update" path via URL without Realtor Site Author...