42 matches found
WordPress GetPaid plugin < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification vulnerability
Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification vulnerability discovered by Pedro Pinho in WordPress Plugin GetPaid versions 2.8.55...
EUVD-2026-54190
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901 GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901
The CVE-2026-12901 entry concerns the GetPaid WordPress plugin (versions prior to 2.8.55). The vulnerability arises because Worldpay payment notifications are not authenticated, enabling unauthenticated attackers to forge a notification that marks a pending invoice as paid without real payment. I...
CVE-2026-12901 GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
CVE-2026-12901: Insufficient Verification of Data Authenticity
The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made...
PT-2026-68642
Name of the Vulnerable Software and Affected Versions GetPaid WordPress plugin versions prior to 2.8.55 Description The plugin fails to verify the authenticity of incoming Worldpay payment notifications. This allows unauthenticated attackers to forge notifications that mark pending invoices as pa...
MAL-2025-1959 Malicious code in worldpay-raft-connector (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in worldpay-raft-connector (npm)
--- -= Per source details. Do not edit below this line.=-...
Malware in worldpay-raft-connect
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-9001 Malicious code in worldpay-raft-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in worldpay-raft-connect (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
login.worldpay.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-684826 Description| Value ---|--- Affected Website:| login.worldpay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...
yourmarketplace.worldpay.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-684825 Description| Value ---|--- Affected Website:| yourmarketplace.worldpay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidd...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:32 GMT Vulnerability type:| XSS...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:32 GMT Vulnerability type:| XSS...
secure.worldpay.com XSS vulnerability
Vulnerable URL: https://secure.worldpay.com/merchant/shopperWebformRefund/startBTRefund.html?wfurl=MWQyMjJkNDN=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:31 GMT Vulnerability type:| XSS...
login.worldpay.com XSS vulnerability
Vulnerable URL: https://login.worldpay.com/?resourceurl=https%3A%2F%2Fmybusiness.worldpay.com/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 12.08.2016 Latest check for patch:| 12.08.2016 09:31 GMT Vulnerability type:| XSS Vulnerability status:|...
perks.worldpay.us XSS vulnerability
Vulnerable URL: https://perks.worldpay.us/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 17:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...