{"uuid": "53cc0955-b16e-4bd4-a6ca-f72241f8e68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16272", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4lmbiovl2w", "content": "CVE-2026-16272 - paytr virtual pos iframe api (v9x) whmcs module\nThe PayTR Virtual POS iFrame plug\u2011in for the WHMCS billing system, versions 9.0.0 through 9.0.2, can be tricked into accepting forged identifiers. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-09T22:30:04.104153Z"}