Threats Tagged 'cwe-472'

Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuthorize endpoints accept the charge total from a client-controlled request parameter and forward it to the payment gateway without recomputing it from the form's configured product prices. Neither endpoint enforces authentication or CSRF checks. An unauthenticated attacker can purchase any priced item for an arbitrary amount (e.g., $0.01), and can additionally forge line items, quantities, and shipping.

The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkout without paying the merchant.

The Event Booking Manager for WooCommerce (Pro) WordPress plugin versions before 5.0.3 contains a vulnerability where the ticket price is not validated on the server during its native checkout process. This flaw allows unauthenticated users to supply arbitrary ticket prices, potentially booking paid event tickets for free and obtaining valid bookings without payment.

The WPC Name Your Price for WooCommerce WordPress plugin versions before 2.2.5 contain a vulnerability where the server-side price allowlist is not enforced for products configured in "Select" price mode. This allows unauthenticated visitors to add products to the cart at arbitrary prices below the allowed values and place orders at those underpriced amounts, potentially causing revenue loss. This issue is distinct from a previous vulnerability fixed in version 2.2.0 and remains unpatched through 2.2.4.

CVE-2026-15149 is a medium severity vulnerability in the WP Hotel Booking WordPress plugin before version 2.3.3. The plugin does not properly validate that room quantities and order totals are non-negative during booking. It relies on client-controlled cart data, which allows unauthenticated users to create confirmed reservations for free or at a reduced price.

CVE-2026-10524 is a vulnerability in the CoCart WordPress plugin before version 4.9.0. It allows unauthenticated users to manipulate product prices by supplying arbitrary price values through a public REST API endpoint. This flaw enables attackers to complete WooCommerce orders at manipulated totals without validation against actual product prices.

The Persian Elementor plugin for WordPress up to version 2.8.1 contains a vulnerability that allows unauthenticated attackers to manipulate payment amounts submitted to the ZarinPal payment gateway. This occurs because the plugin does not perform server-side validation of the 'amount' parameter, trusting user-supplied values instead. This can lead to attackers submitting arbitrary payment amounts, potentially bypassing intended pricing controls.