Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:20:41 +0000 CVE-2026-90923 — Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion https://db.gcve.eu/vuln/cve-2026-90923 <p><strong>Affected:</strong> Unknown Autopay</p> <p>The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers&#39; orders.</p> <p><strong>Affected:</strong> Unknown Autopay</p> <p>The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers&#39; orders.</p> https://db.gcve.eu/vuln/cve-2026-90923