Threats tagged 'ghsa-r4j2-2784-v3cx'

WWBN AVideo versions up to 29.7.1 have a vulnerability in the PayPalYPT plugin's ipnV2.php file that allows improper payment verification. Attackers can exploit this flaw by forwarding verified PayPal recurring payment notifications (IPNs) from their own PayPal accounts with a chosen user ID, resulting in unauthorized wallet crediting. This vulnerability does not require authentication and can be exploited repeatedly each billing cycle.