https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:37:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351379 EUVD-2026-351379 https://cve.radiocsirt.org/vuln/euvd-2026-351379 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16990 <p>The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.</p> <p>The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16990 https://cve.radiocsirt.org/vuln/ghsa-4h7v-8qrm-x2jj <p>The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.</p> <p>The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.</p> https://cve.radiocsirt.org/vuln/ghsa-4h7v-8qrm-x2jj