Vulnerabilities in UNKNOWN
6,367 resultsCVE-2026-121633MEDIUMOrder Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN ListenerEPSS 0.1%CVE-2026-92429MEDIUMRede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit WebhookEPSS 0.1%CVE-2026-103327MEDIUMCryptoCloud - Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Webhook SecretEPSS 0.1%CVE-2026-103311MEDIUMCoinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared SecretEPSS 0.1%CVE-2026-86791MEDIUMiPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation ForgeryEPSS 0.1%CVE-2026-92996MEDIUMVerge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_doneEPSS 0.1%CVE-2026-121636MEDIUMQuick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' ParameterEPSS 0.1%CVE-2026-103359MEDIUMPayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook ForgeryEPSS 0.1%CVE-2026-103310MEDIUMPayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment NotificationEPSS 0.1%CVE-2026-89411MEDIUMPaymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntentEPSS 0.1%CVE-2026-103517MEDIUMAirwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged WebhookEPSS 0.1%CVE-2026-92428MEDIUMRede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure WebhookEPSS 0.1%CVE-2026-103325LOWTiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC BypassEPSS 0.1%CVE-2026-110510LOWEssential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title TagEPSS 0.1%CVE-2026-85346MEDIUMFV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser HandlersEPSS 0.1%CVE-2026-117588MEDIUMWP Google Review Slider < 18.11 - Google API Settings Update via CSRFEPSS 0.1%CVE-2026-110983MEDIUMWP Photo Album Plus < 9.3.04.004 - Photo Comment Deletion via CSRFEPSS 0.1%CVE-2026-106470MEDIUMWP Data Access < 5.5.88 - Subscriber+ SSRFEPSS 0.1%CVE-2026-121472MEDIUMAutomatorWP < 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRFEPSS 0.1%CVE-2026-84166MEDIUMHotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRFEPSS 0.1%