https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:45:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-32834 <p><strong>Affected:</strong> Scott Paterson easy-paypal-events-tickets</p> <p>Easy PayPal Events &amp; Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying &#39;test&#39; as the hash parameter. Attackers can access the vulnerable endpoint via the add_wpeevent_button_qr action to retrieve sensitive order details including PayPal transaction IDs, customer email addresses, purchase amounts, and ticket information for any order with a known or guessed post ID.</p> <p><strong>Affected:</strong> Scott Paterson easy-paypal-events-tickets</p> <p>Easy PayPal Events &amp; Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying &#39;test&#39; as the hash parameter. Attackers can access the vulnerable endpoint via the add_wpeevent_button_qr action to retrieve sensitive order details including PayPal transaction IDs, customer email addresses, purchase amounts, and ticket information for any order with a known or guessed post ID.</p> https://cve.radiocsirt.org/vuln/cve-2026-32834