IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-09 06:16

MODIFIED

2026-06-09 06:16

EPSS (Prob. Exploit)

0.33%

Top 75.0%

DATA SOURCES:

NVD 🔗 2026-06-09 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05

> DESCRIPTION

The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events before processing them, allowing unauthenticated attackers to forge webhook payloads and manipulate the payment state of arbitrary transactions.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-83pc-3rw9-qpwj MODERATE

Deno: WebSocket API sandbox bypass via missing post-DNS check

AFFECTED PACKAGES:

RUST / deno

<= 2.8.0

Fixed in: 2.8.1

> HISTORIQUE DES MODIFICATIONS

Première apparition

09/06/2026 06:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 4 months ago

> REFERENCES