https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:57:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-1782 <p><strong>Affected:</strong> Wpmet MetForm Pro</p> <p>The MetForm Pro plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 3.9.7 This is due to the payment integrations (Stripe/PayPal) trusting a user-submitted calculation field value without recomputing or validating it against the configured form price. This makes it possible for unauthenticated attackers to manipulate the payment amount via the &#39;mf-calculation&#39; field in the form submission REST request granted there exists a specific form with this particular configuration.</p> <p><strong>Affected:</strong> Wpmet MetForm Pro</p> <p>The MetForm Pro plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 3.9.7 This is due to the payment integrations (Stripe/PayPal) trusting a user-submitted calculation field value without recomputing or validating it against the configured form price. This makes it possible for unauthenticated attackers to manipulate the payment amount via the &#39;mf-calculation&#39; field in the form submission REST request granted there exists a specific form with this particular configuration.</p> https://cve.radiocsirt.org/vuln/cve-2026-1782