https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T18:34:16.157960+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-84169 fkie_cve-2026-84169 2026-10-05T18:34:16.173946+00:00

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment.

 https://vulnerability.circl.lu/vuln/ghsa-vjc6-47gr-qc78 GHSA-vjc6-47gr-qc78 2026-10-05T18:34:16.174033+00:00

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment.