https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T23:49:06.480696+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-96200 fkie_cve-2026-96200 2026-10-01T23:49:06.560076+00:00

The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment.

 https://vulnerability.circl.lu/vuln/ghsa-8h2p-v5jm-73xp GHSA-8h2p-v5jm-73xp 2026-10-01T23:49:06.560199+00:00

The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment.