Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:15:05 +0000 CVE-2026-90923 — Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion https://cve.radiocsirt.org/vuln/cve-2026-90923 <p><strong>Affected:</strong> Unknown Autopay</p> <p>The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers&#39; orders.</p> <p><strong>Affected:</strong> Unknown Autopay</p> <p>The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers&#39; orders.</p> https://cve.radiocsirt.org/vuln/cve-2026-90923