Threats tagged 'ghsa-qm8v-r38g-4hjq'

The Quick Event Manager WordPress plugin versions before 9.19 fail to verify the authenticity of PayPal payment notifications. This flaw allows unauthenticated attackers to mark event registrations as paid without actually making a payment, potentially leading to unauthorized access or benefits tied to paid registrations.