PT-2026-97705

Name of the Vulnerable Software and Affected Versions WPForms versions prior to 2.0.2 Description An issue exists where the plugin fails to verify if a Stripe payment object provided during a public form submission actually belongs to the plugin before processing it. This allows unauthenticated...

EUVD-2026-40919

The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained security vulnerabilities. These vulnerabilities stemmed from logical errors in the test.php debugging endpoint of the StripeYPT plugin, which could lead to arbitra...