https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:50:30 +0000 https://vulnerability.circl.lu/vuln/cnvd-2026-23811 cnvd-2026-23811 https://vulnerability.circl.lu/vuln/cnvd-2026-23811 https://vulnerability.circl.lu/vuln/fkie_cve-2026-4986 <p>The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.</p> <p>The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-4986 https://vulnerability.circl.lu/vuln/ghsa-xjpm-62p5-jw4j <p>The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.</p> <p>The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.</p> https://vulnerability.circl.lu/vuln/ghsa-xjpm-62p5-jw4j