https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T20:50:31.042394+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2026-23811 cnvd-2026-23811 2026-10-06T20:50:31.046933+00:00 cnvd-2026-23811 https://vulnerability.circl.lu/vuln/fkie_cve-2026-4986 fkie_cve-2026-4986 2026-10-06T20:50:31.047002+00:00

The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.

 https://vulnerability.circl.lu/vuln/ghsa-xjpm-62p5-jw4j GHSA-xjpm-62p5-jw4j 2026-10-06T20:50:31.047063+00:00

The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.