Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/08/10 6:00 a.m.33 views

CVE-2026-17016 Restore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via PDT Underpayment

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less than the order total and still have the order marked as fully...

0.00187EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/04 5:34 p.m.14 views

WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin <= 1.52.0 - Missing Authorization to Unauthenticated Stripe PaymentIntent Reuse / Underpayment Bypass vulnerability

Missing Authorization to Unauthenticated Stripe PaymentIntent Reuse / Underpayment Bypass vulnerability discovered by Kittipat Jitphonchana in WordPress Plugin Forminator versions = 1.52.0...

5.3CVSS5.8AI score0.00367EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder