40 matches found
WordPress GetPaid plugin < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification vulnerability
Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification vulnerability discovered by Pedro Pinho in WordPress Plugin GetPaid versions 2.8.55...
EUVD-2026-54190
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901 GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901 GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901
The CVE-2026-12901 entry concerns the GetPaid WordPress plugin (versions prior to 2.8.55). The vulnerability arises because Worldpay payment notifications are not authenticated, enabling unauthenticated attackers to forge a notification that marks a pending invoice as paid without real payment. I...
CVE-2026-12901: Insufficient Verification of Data Authenticity
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
Malicious code in worldpay-raft-connector (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1959 Malicious code in worldpay-raft-connector (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9001 Malicious code in worldpay-raft-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in worldpay-raft-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
login.worldpay.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-684826 Description| Value ---|--- Affected Website:| login.worldpay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...
yourmarketplace.worldpay.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-684825 Description| Value ---|--- Affected Website:| yourmarketplace.worldpay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidd...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:32 GMT Vulnerability type:| XSS...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:32 GMT Vulnerability type:| XSS...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:31 GMT Vulnerability type:| XSS...
login.worldpay.com XSS vulnerability
Vulnerable URL: https://login.worldpay.com/?resourceurl=https%3A%2F%2Fmybusiness.worldpay.com/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:31 GMT Vulnerability type:| XSS Vulnerability status:|...
perks.worldpay.us XSS vulnerability
Vulnerable URL: https://perks.worldpay.us/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 17:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:31 GMT Vulnerability type:| XSS...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN&c7f;=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:31 GMT Vulnerability type:...