Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:08:47 +0000 cnvd-2026-32223 https://cve.radiocsirt.org/vuln/cnvd-2026-32223 cnvd-2026-32223 https://cve.radiocsirt.org/vuln/cnvd-2026-32223 EUVD-2026-349317 https://cve.radiocsirt.org/vuln/euvd-2026-349317 EUVD-2026-349317 https://cve.radiocsirt.org/vuln/euvd-2026-349317 fkie_cve-2026-15148 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15148 <p>The WP Events Manager WordPress plugin before 2.2.5 does not verify that an incoming payment notification originates from the site&#39;s configured merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to mark any booking as paid without a legitimate payment reaching the merchant, including other users&#39; bookings.</p> <p>The WP Events Manager WordPress plugin before 2.2.5 does not verify that an incoming payment notification originates from the site&#39;s configured merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to mark any booking as paid without a legitimate payment reaching the merchant, including other users&#39; bookings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15148 GHSA-6g36-5qr8-2jpf https://cve.radiocsirt.org/vuln/ghsa-6g36-5qr8-2jpf <p>The WP Events Manager WordPress plugin before 2.2.5 does not verify that an incoming payment notification originates from the site&#39;s configured merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to mark any booking as paid without a legitimate payment reaching the merchant, including other users&#39; bookings.</p> <p>The WP Events Manager WordPress plugin before 2.2.5 does not verify that an incoming payment notification originates from the site&#39;s configured merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to mark any booking as paid without a legitimate payment reaching the merchant, including other users&#39; bookings.</p> https://cve.radiocsirt.org/vuln/ghsa-6g36-5qr8-2jpf