https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:29:55.326251+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349279 EUVD-2026-349279 2026-10-09T06:29:55.328354+00:00 EUVD-2026-349279 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12901 fkie_cve-2026-12901 2026-10-09T06:29:55.328385+00:00

The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made.

 https://cve.radiocsirt.org/vuln/ghsa-w426-cmgx-r837 GHSA-w426-cmgx-r837 2026-10-09T06:29:55.328416+00:00

The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made.