Threats tagged 'ghsa-w426-cmgx-r837'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.2%	CVE-2026-12901GetPaid (WordPress plugin) · Insufficient Verification of Data Authenticity Medium5.9EPSS 0.2%2026-08-06CVE Database V5CVE-2026-12901 A vulnerability in the GetPaid WordPress plugin before version 2.8.55 allows unauthenticated attackers to forge Worldpay payment notifications. This flaw results from insufficient verification of data authenticity, enabling attackers to mark pending invoices as paid without actual payment. EPSS 0.2%Vulnerability CWE-345 #ghsa-w426-cmgx-r837	CVE Database V5	2026-08-06

Page 1 of 1