Threats tagged 'ghsa-gph4-x2p9-rpr7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-123668The GetPaid WordPress plugin from 2.8.63 to 2.8.64 does not ensure item quantities on its payment forms are whole Medium5.32026-11-11GCVE DatabaseCVE-2026-123668 The GetPaid WordPress plugin versions 2.8.63 and 2.8.64 have a vulnerability where item quantities on payment forms are not validated as whole numbers. This flaw allows unauthenticated users to create invoices for priced items that can be marked as paid without actual payment. Report on CVE-2026-123668 Vulnerability #ghsa-gph4-x2p9-rpr7	GCVE Database	2026-11-11

Page 1 of 1