SQL injection in itsourcecode Sales and Inventory System 1.0 allows authenticated remote attackers to manipulate the unsanitized `ID` parameter in `/pages/inv_del.php`, enabling database enumeration, data extraction, and record modification. The application is an educational PHP project from itsourcecode.com with minimal production exposure, and a public proof-of-concept exploit has been published on GitHub. No vendor-released patch has been identified at time of analysis.
Stored cross-site scripting in IBM Langflow OSS 1.0.0-1.11.2 allows an unauthenticated network attacker to inject persistent malicious scripts into the Playground chat interface. When a victim user subsequently loads the chat view, the stored payload executes in their browser under the application's origin, enabling session hijacking, credential theft, or unauthorized UI manipulation. IBM has released a patch per advisory node/7285646; no public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-site scripting in Yordam Information Technology's Library Information and Document Automation Program enables unauthenticated network attackers to inject malicious scripts into pages served to authenticated library staff or patrons. Affected versions span v22.1 up to (but not including) v22.2. No active exploitation has been identified and no public proof-of-concept is known, but the vulnerability is reported by TR-CERT and carries a scope-changing CVSS vector reflecting its potential to pivot from the web app context into the victim's browser session.
Stored cross-site scripting in Apache SkyWalking's Booster UI dashboard widget rendering (versions 10.2.0 through 10.4.0) allows an attacker with dashboard-edit access to inject persistent JavaScript that executes in the browser of any user viewing the affected dashboard. This is an incomplete remediation of CVE-2025-54057, meaning the original patch left residual unsanitized widget input paths. No public exploit code or active exploitation has been identified at time of analysis, though the prior CVE's public disclosure increases the likelihood of targeted research against the remaining surface.
Cross-site scripting in Yordam Information Technology's Library Information and Document Automation Program (all versions before v22.2) allows unauthenticated remote attackers to inject malicious scripts into HTML attribute contexts, executing arbitrary JavaScript in victims' browsers. The CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C vector confirms a classic reflected XSS pattern requiring only that a target user click a crafted link. Reported by TR-CERT with no public exploit or KEV listing at time of analysis.
Improper privilege management in StackStorm st2's API Key Handler allows authenticated remote attackers to manipulate the `api_key_api.user` argument in `st2api/st2api/controllers/v1/auth.py`, enabling unauthorized privilege escalation within the automation platform. All versions through 3.9.0 are affected per the CPE data, and a publicly available proof-of-concept exploit exists (GitHub issue #6380). No vendor patch has been released; the StackStorm project has not responded to the responsible disclosure report.
Use-after-free in PX4 Autopilot through v1.17.0 permits adjacent attackers with shell access to corrupt the autopilot's heap by racing task spawning against object deletion in the temperature calibration subsystem. The root cause is that `TemperatureCalibration::start()` stores the spawned task handle in an instance member variable; if the object is freed before the spawned task begins execution, the task writes into dangling heap memory, corrupting adjacent allocator metadata or unrelated objects. The upstream fix in PR #28487 promotes the task handle to a local variable, eliminating the lifecycle coupling. No public exploit code or CISA KEV listing exists at time of analysis.
SQL injection in code-projects Online Shopping System 1.0 allows authenticated administrators to manipulate database queries via the `mobile` parameter in admin/adduser.php. The vulnerable call passes unsanitized user input directly to mysqli_query(), enabling an admin-level attacker to read, modify, or delete database contents. A public proof-of-concept exploit has been published on GitHub; no vendor patch has been identified.
Cross-site scripting in Eleveo Quality Management 9.7.0 allows authenticated low-privileged users to inject malicious scripts into the Conversation Review component, which then execute in the browsers of other users who subsequently view the affected content. A public proof-of-concept exploit has been disclosed via Google Drive, and the vendor did not respond to responsible disclosure outreach, leaving no vendor-issued patch available at time of analysis. No active exploitation has been confirmed by CISA KEV.
Stored or reflected cross-site scripting in Eleveo Call Recording Software 9.7.0 allows an authenticated low-privilege user to inject arbitrary client-side script via the name or username parameter of the /callrec/roleAddAction.do endpoint. When a victim user - likely an administrator viewing role management pages - loads the affected page, the injected payload executes in their browser context. A public proof-of-concept exploit exists on Google Drive; the vendor did not respond to responsible disclosure, so no patch has been issued.
HTTP/2 flow-control window mismanagement in libsoup (GNOME's HTTP client/server library) allows a malicious HTTP/2 server to abort a connecting client process or crash its HTTP/2 session. When the client sends a request body sourced from a non-pollable GInputStream, libsoup buffers the data before transmission; a server that then shrinks SETTINGS_INITIAL_WINDOW_SIZE causes the client to copy the full pre-buffered payload into a now-undersized DATA callback without a runtime bounds check, triggering a reachable assertion abort (CWE-617). No public exploit has been identified at time of analysis, and the high-complexity timing requirement constrains practical exploitation.
Resource exhaustion in undici's retry handler (versions 7.11.0-<7.29.1 and 8.0.0-<8.10.2) allows an attacker-controlled HTTP server to permanently orphan response body streams, accumulating unreleased promises and memory until application concurrency or heap is exhausted. The flaw arises when a server sends a truncated response body (with Content-Length declared), triggering a retry that returns a non-retryable status code - causing the original body stream to be abandoned without being ended or destroyed, and bypassing the body timeout because the timer is coupled to the connection parser rather than the orphaned stream. No public exploit has been identified at time of analysis, but the attack requires only two crafted HTTP responses and no persistent connection, making automated triggering straightforward against applications that use undici with retry logic enabled.
SolidInvoice's REST API authenticator, in all versions prior to 3.0.1, silently accepts long-lived bearer tokens via a `?token=` URL query parameter as a fallback to the intended `X-API-TOKEN` request header, causing credentials to be permanently recorded in server access logs, reverse-proxy logs, CDN access logs, browser history, and HTTP Referer headers forwarded to third-party origins. Any actor with read access to those artifacts - sysadmins, log-aggregation pipelines, analytics vendors receiving Referer data, or post-compromise intruders pivoting through log stores - can extract a valid API token and authenticate to the invoicing platform without exploiting any application logic. Version 3.0.1 fixes the issue by removing the query-parameter fallback and enforcing header-only delivery; no public exploit has been identified at time of analysis.
Process-crashing denial of service in undici's WebSocket permessage-deflate implementation allows a remote unauthenticated attacker to terminate any Node.js process hosting the affected client by sending a crafted compressed WebSocket frame. The size-limit enforcement routine strips all event listeners - including the error handler - from the zlib inflate stream while the stream is still active; a subsequent malformed DEFLATE byte then emits an uncaught error that Node.js treats as a fatal unhandled exception, killing the process. Versions 6.25.0-6.28.0, 7.28.0-7.29.0, and 8.1.0-8.10.1 are confirmed affected; fixed releases are available per OpenJS advisory GHSA-3wwx-pv8p-q78v, and no public exploit has been identified at time of analysis.
Memory exhaustion via compression bomb in undici's decompress interceptor (versions 7.15.0-<7.29.1 and 8.0.0-<8.10.2) allows a malicious or compromised upstream HTTP server to crash a Node.js process by returning a small compressed payload that expands to hundreds of megabytes in client heap memory. The interceptor respects the untrusted Content-Encoding header and enforces no ceiling on total decompressed output size, making the attack purely asymmetric - a kilobyte-scale upstream payload can trigger unbounded client-side allocation. No public exploit has been identified and the vulnerability is not in the CISA KEV catalog; fixed versions 7.29.1 and 8.10.2 are available.
Flatpak's `org.freedesktop.Flatpak.SystemHelper` D-Bus service contains a TOCTOU race condition in the `Deploy()` function where a privileged `chmod` executes before OSTree repository validation completes, allowing a local low-privileged attacker to redirect symlinks to arbitrary system files within that timing window. A successful exploit can yield high-confidentiality impact (reading privileged files) and limited integrity and availability impact (CVSS C:H/I:L/A:L), as the unguarded chmod can be inherited by attacker-controlled symlink targets. No public exploit code or CISA KEV listing has been identified at time of analysis, and the High attack complexity (AC:H) reflects the precision timing required to win the race.
Denial-of-service exposure in IBM App Connect Enterprise and IBM Integration Bus for z/OS Toolkit allows an authenticated, network-connected user to crash or incapacitate the Toolkit by submitting crafted XML containing recursive or deeply nested entity references. The root cause is CWE-776, improper restriction of recursive entity references in DTDs - commonly called an XML Entity Expansion or 'Billion Laughs' attack. Patch is available per IBM advisory 7286372; no public exploit code or active exploitation has been identified at time of analysis.
Unauthenticated access to the stats/login endpoint in jofpin trape 1.0.0 exposes collected tracking statistics to any remote party without credentials via the core/stats.py component. The missing authentication check (CWE-287) allows the statistics interface to be queried freely over the network, leaking data about tracked individuals - a meaningful privacy concern given trape's purpose as a people-tracking OSINT tool. A proof-of-concept exploit is publicly available, and the vendor has not responded to the GitHub issue report disclosing the flaw.
SQL injection in code-projects Vehicle Management System 1.0 allows remote unauthenticated attackers to manipulate the busid parameter in /busprofile.php to inject arbitrary SQL into the underlying database. The CVSS 4.0 vector confirms no authentication, low complexity, and no user interaction is required for exploitation. A public proof-of-concept exploit is documented on GitHub, making this trivially reproducible against any network-exposed instance.
Denial of service on IBM i versions 7.3 through 7.6 is achievable by exploiting an off-by-one write in the LPD (Line Printer Daemon) queue name parser, corrupting adjacent memory and crashing the affected service. The vendor description specifies a local authenticated attacker as the threat actor, yet IBM's own submitted CVSS vector (AV:N/AC:L/PR:N/UI:N) characterizes this as an unauthenticated network-reachable flaw - a direct contradiction that materially affects risk prioritization. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Stack-based buffer overflow in IBM i 7.3 through 7.6 allows an authenticated local attacker to crash the system, producing a denial of service with no confidentiality or integrity impact. The flaw is classified as CWE-121 and is limited in severity by both the access prerequisites and the bounded availability-only outcome. A vendor patch is available via IBM's support portal, and no public exploit code has been identified at time of analysis.
Credential leakage via improper logging affects IBM App Connect Enterprise 12.x-13.x and IBM Integration Bus for z/OS 10.1.x, allowing a local attacker to recover plaintext credentials from application log files without requiring elevated privileges. The root cause is CWE-532, where sensitive authentication material is written to diagnostic or operational logs during normal product operation. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch via their support advisory.
Credential exposure in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.28 and 13.0.1.0-13.0.8.1) and IBM Integration Bus for z/OS (10.1.0.0-10.1.0.7) enables any local user to recover database credentials from application log files. The root cause is CWE-532: sensitive material - specifically database connection credentials - is written into log output that can be read by unprivileged local accounts. No public exploit is identified at time of analysis, but successful exploitation yields high confidentiality impact, enabling downstream database compromise.
Cleartext credential exposure in IBM App Connect Enterprise 12.x and 13.x and IBM Integration Bus for z/OS 10.x allows a local attacker to harvest service credentials directly from trace log files. The middleware writes authentication material in unencrypted form during trace operations, violating the principle of minimal data exposure in diagnostic output (CWE-532). No public exploit has been identified and exploitation requires local filesystem access under high-complexity conditions, but successful compromise yields full credential disclosure with a CVSS confidentiality impact of High.
Uncontrolled recursion in IBM App Connect Enterprise (versions 12.x and 13.x) and IBM Integration Bus for z/OS (version 10.1.x) allows a local authenticated attacker to crash the integration runtime via stack exhaustion, resulting in a denial of service. The flaw is classified as CWE-674 and affects a broad version range across both product lines, with a vendor-released patch now available. No public exploit code or active exploitation has been identified at time of analysis.
IBM i versions 7.5 and 7.6 expose privileged file contents to locally authenticated users operating over SSH, allowing a low-privilege account to read information that should be restricted by the operating system's privilege model. The vulnerability is rooted in CWE-267 (Privilege Defined With Unsafe Actions), meaning the IBM i SSH subsystem permits file access operations that violate the intended privilege boundary for the relevant file. No public exploit code has been identified and the vendor-assigned CVSS score of 3.3 (Low) reflects the constrained local access requirement and limited confidentiality impact.
Path traversal in IBM Langflow OSS 1.0.0-1.10.2 permits authenticated remote attackers to read arbitrary files on the underlying server by embedding dot-dot sequences (/../) in crafted URL requests. The vulnerability (CWE-22) exposes any file readable by the application process, potentially including configuration files, credentials, private keys, and other sensitive data. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch.
Remote authenticated attackers can bypass security restrictions in IBM i 7.3 through 7.6 by exploiting improper authentication logic during service-name matching (CWE-287). The flaw allows a low-privileged authenticated user to overstep their authorized service boundaries, achieving limited unauthorized reads and writes with no user interaction required. No public exploit code exists and this CVE does not appear in the CISA KEV catalog; IBM has released a patch via the support portal.
Let me synthesize. Product: pfSense (Netgate pfSense Plus / pfSense CE). Product name: "pfSense". Key facts: XSS in captive_portal_status.widget.php, affects pfSense Plus <= 26.03 and pfSense CE <= 2.8.1. CVSS 5.4 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N. CWE-79. EPSS 0.26% (17th percentile). No KEV. Tags mention RCE — likely mislabeled/stretch (XSS → limited code exec in browser context). "N A" tag is noise. CPE is n/a — data quality flag possible: CPE missing. Hmm, the flag types are mislabeled_tag/wrong_vendor/wrong_product/missing_tag. Not "missing_cpe". I could flag "RCE" as mislabeled tag? The description says "execute arbitrary code" but it's XSS — the CWE is CWE-79, so "RCE" tag is arguably mislabeled. Hmm — but description itself says allows arbitrary code execution. I'd be careful. Maybe flag "RCE" mislabeled with medium/low confidence... Actually the rules say only emit flags when clearly wrong and verifiable. XSS in a captive portal widget page = script execution in victim's browser, not server RCE. CVSS vector C:L/I:L/A:N with S:U strongly implies no RCE. I think flagging "RCE" as mislabeled is defensible with medium confidence. Also "N A" tag — that's clearly a bad tag (from "n/a" vendor parsing). Could flag as mislabeled_tag target "N A" — but suggested? It's not a real tag. Hmm, "wrong_vendor"? The tag "N A" is a garbage placeholder. I'd flag it as mislabeled_tag with suggested null. Actually maybe better: type "mislabeled_tag", target "N A", suggested null, confidence high, reason "Placeholder 'N A' is an artifact of missing CPE vendor/product data, not a real tag." Also missing tags: "pfsense" would be a clearly applicable vendor/product tag. Suggested "pfsense". That seems high confidence and unambiguous. Also "netgate"? I'd emit missing_tag target "pfSense", suggested "pfsense". Hmm, but the instruction says emit missing_tag only when unambiguously implied — pfSense is the product; the tag list lacks it. Yes. Should I flag "PHP"? captive_portal_
Security restriction bypass in IBM i versions 7.3, 7.4, 7.5, and 7.6 enables remote authenticated attackers to circumvent platform-level access controls by exploiting predictable server-generated seed values (CWE-330). The vulnerability stems from insufficient entropy in IBM i's seed generation process, allowing an attacker with a valid low-privilege account to predict protected values - such as session tokens, nonces, or challenge-response material - and leverage them to bypass enforced security boundaries. No public exploit code has been identified at time of analysis; a vendor-supplied patch is available through IBM's support portal.
Stored cross-site scripting in the pfSense dashboard RSS Widget allows an authenticated attacker to inject arbitrary JavaScript into the browsers of all authenticated users who view the dashboard. The attacker configures the RSS widget to point to an attacker-controlled feed whose title element contains a malicious payload; because pfSense previously rendered the feed title via `<?=$item->get_title()?>` without sanitization, the script executes in any victim session that loads the dashboard. Affected versions are pfSense Plus 26.03 and 25.11.1, and pfSense CE 2.8.1; no public exploit has been identified at time of analysis.
Insecure Direct Object Reference (IDOR) in the WP Rentals WordPress theme (versions before 3.16.0) allows authenticated low-privileged users to manipulate user-controlled keys to access, modify, or delete rental objects-listings, bookings, or similar records-belonging to other platform users. The flaw, reported by Patchstack and classified as CWE-639, stems from the theme failing to verify server-side that the requesting user owns or is authorized to act on the referenced resource. No active exploitation or public exploit code has been identified at time of analysis.
Stored cross-site scripting in Menulux Portal (all versions before 20260903211448) allows an authenticated low-privileged user to inject persistent malicious scripts into web pages that execute in the browsers of other users who view the affected content. The scope change (S:C in CVSS) indicates the attack crosses the boundary from the application into victim browsers, enabling session theft, credential harvesting, or UI redirection against any user who views the poisoned content. No public exploit code or active exploitation has been identified at time of analysis; the vulnerability was reported by TR-CERT and a fix has been released.
Stored cross-site scripting in Gastromenum Ticket and QR Menu System allows authenticated low-privilege users to inject persistent malicious scripts that execute in other users' browsers. All versions prior to 2026.08.31 are affected. The vulnerability is tracked by TR-CERT (Turkish national CERT) and no public exploit or active exploitation has been identified at time of analysis.
phpMyFAQ versions before 4.1.8 expose TOTP shared secrets in plaintext within user data export ZIP archives, enabling two-factor authentication bypass. Any authenticated user who generates their own data export - or any party who obtains such an archive through secondary means (e.g., misconfigured storage, insider access, or a separate file-disclosure vulnerability) - can extract the raw TOTP seed and compute valid one-time codes indefinitely. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Out-of-bounds read in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 enables a remote unauthenticated attacker to cause a denial of service by sending a crafted network request to the mirroring service. The flaw (CWE-125) is exploitable with no authentication or user interaction and can disrupt high-availability replication continuity. IBM has released a patch via advisory node/7285904; no public exploit code has been identified at time of analysis.
Incorrect authorization (CWE-863) in phpMyFAQ before 4.1.8 allows authenticated low-privileged editors to read draft and inactive content that is intentionally withheld from public view. Users holding only 'add' permissions can directly invoke the news-edit and FAQ-translate admin endpoints, bypassing the intended role separation and exposing unpublished material. No public exploit has been identified at time of analysis, and exploitation requires a valid account in the target phpMyFAQ installation.
Log injection in IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 allows unauthenticated remote actors to insert forged or malformed entries into application log files by supplying input containing special characters such as CRLF sequences that are written to logs without sanitization. The integrity impact is limited to log tampering - attackers cannot read data, escalate privileges, or disrupt service through this flaw alone, but forged log records can mislead incident responders and undermine audit-trail integrity. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Missing authorization in phpMyFAQ's admin dashboard API exposes aggregate search statistics and content-health counters to any authenticated user, regardless of their assigned role or privilege level. All versions before 4.2.0-alpha.2 are affected, with the /searches and /content-health admin API endpoints enforcing only authentication - not permission checks - as the access gate. No public exploit has been identified, and the impact is confined to confidentiality of internal operational statistics.
Reflected cross-site scripting in AVideo's userLogin.php allows unauthenticated attackers to inject and execute arbitrary JavaScript in a victim's browser by crafting a malicious URL with a script-breakout payload in the error parameter. The attack targets any user who follows the crafted link to the AVideo login page, enabling session hijacking, credential phishing overlays, or browser-based actions on behalf of the victim. No active exploitation (CISA KEV) is recorded and no public exploit code has been independently confirmed beyond the security advisory description.
Open redirect in Dub's link management platform allows unauthenticated network attackers to append a redir_url query parameter to any existing short link, redirecting visitors through the trusted Dub domain to arbitrary external URLs without validation or allowlist enforcement. All versions up to commit 73415cf5e6be13ce9adb7ba5e97474307db34a17 are affected, with the flaw residing in the get-final-url.ts middleware. The primary risk is phishing amplification: attackers can weaponize Dub's brand reputation and link-cloaking feature to deliver convincing lure URLs that bypass corporate URL reputation filters which trust the Dub domain.
Authenticated readers in SiYuan v3.8.1 can call the POST /api/transactions/undoState endpoint with a known document root ID to retrieve internal root IDs of other documents - including private or unpublished ones - that participated in the same cross-document transaction. The flaw is CWE-639 (IDOR via user-controlled key): the endpoint reads from the global undo-log stack and returns peekMutatedRootIDs without applying publish-access visibility filtering to the returned identifiers. Document body contents are not exposed; however, internal identifiers and cross-document transaction relationships leak across trust boundaries. Vendor-released patch v3.8.2 resolves the issue; no public exploit or CISA KEV listing is known at time of analysis.
Server-side request forgery in Camaleon CMS 2.7.5-2.9.1 allows authenticated users to abuse the media library's 'Upload from URL' feature to reach internal network services. The root cause is Ruby's OpenURI library transparently following HTTP redirects, so a URL that passes initial host validation can redirect to an internal address (cloud metadata endpoints, internal APIs) that the server then fetches and returns. Version 2.9.2 patches the issue with a redirect-blocking download helper; no public exploit or CISA KEV listing has been identified.
Chunked-body handling in undici's dump interceptor triggers a double-completion assertion that tears down the underlying TCP connection while returning a misleading success status to the application. Affected are undici versions 7.1.0 through 7.29.0 and 8.0.0 through 8.10.1; fixed releases 7.29.1 and 8.10.2 are available. No public exploit or active exploitation has been identified; the CVSS 3.7 score reflects the high attack complexity and limited real-world impact relative to the narrow exploitation path.
Credential redirect vulnerability in Snowflake JDBC Driver 4.2.0-4.3.3 allows a lower-trust principal who can control the account identifier to cause the driver to transmit login credentials to an attacker-chosen HTTPS endpoint rather than Snowflake's legitimate servers. The attack is exclusively exercisable through the jdbc:snowflake:auto connection scheme when the connections.toml configuration omits an explicit host value; applications using ordinary JDBC URLs are entirely unaffected. Captured credentials are reusable and can be replayed against Snowflake infrastructure to gain the full privileges of the victimized account. Vendor-released patch 4.3.4 is available and requires manual upgrade; no public exploit or CISA KEV listing has been identified at time of analysis.
Missing Authorization in MarketKing WordPress plugin (≤2.1.60) allows unauthenticated remote attackers to perform integrity-affecting actions by exploiting incorrectly configured access control security levels. The CVSS vector (PR:N/UI:N/AV:N) confirms no authentication or user interaction is required. No public exploit or CISA KEV listing identified at time of analysis; impact is limited to partial integrity (C:N/A:N) per CVSS.
Missing authorization in WCFM Membership WordPress plugin through version 2.11.11 allows unauthenticated remote attackers to exploit incorrectly configured access control and perform unauthorized write operations on protected endpoints. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms the flaw is network-accessible without any authentication, though impact is bounded to limited integrity modification (I:L) with no confidentiality or availability exposure. No public exploit code and no active exploitation have been identified at time of analysis.
Cross-tenant broken object level authorization (BOLA) in OpenPanel before 2.3.0 exposes confidential report definitions and enables permanent destruction of dashboard layouts across tenant boundaries. The `report.getLayouts` and `report.resetLayout` tRPC procedures accept caller-supplied `projectId` values without verifying tenant ownership, allowing any authenticated user to target a victim organization's dashboards by supplying guessable `dashboardId` values. No public exploit is identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Payment forgery in the Restaurant Menu and Food Ordering WordPress plugin before 2.4.12 lets unauthenticated attackers submit crafted HTTP requests that mimic PayPal Instant Payment Notification (IPN) callbacks, marking their own orders as paid and completed without transferring any funds. Merchants suffer direct financial loss - goods or services are dispatched against orders that were never paid. No public exploit has been identified at time of analysis, but the attack primitive is trivial: any HTTP client can replay the IPN POST format since the plugin performs no cryptographic or out-of-band verification with PayPal.
Payment fraud is possible against any WooCommerce store running the ePayco Payment Gateway plugin before version 8.4.7, because the plugin accepts payment confirmation callbacks without verifying the gateway signature. Unauthenticated remote attackers can POST a crafted IPN/webhook payload to the store's payment callback endpoint, causing the plugin to transition order status to 'paid' and triggering fulfillment workflows - without any actual funds being transferred. No public exploit has been identified at time of analysis, and the CVSS score of 5.3 significantly understates real-world merchant financial exposure.