Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:18:53 +0000 CVE-2026-4986 — WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery https://vulnerability.circl.lu/vuln/cve-2026-4986 <p><strong>Affected:</strong> Unknown WPForms</p> <p>The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.</p> <p><strong>Affected:</strong> Unknown WPForms</p> <p>The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.</p> https://vulnerability.circl.lu/vuln/cve-2026-4986