Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:33:11 +0000 CVE-2026-12901 — GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification https://cve.radiocsirt.org/vuln/cve-2026-12901 <p><strong>Affected:</strong> Unknown GetPaid</p> <p>The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made.</p> <p><strong>Affected:</strong> Unknown GetPaid</p> <p>The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made.</p> https://cve.radiocsirt.org/vuln/cve-2026-12901