Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 02:38:26 +0000 CVE-2026-96200 — Payments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment Callback https://vulnerability.circl.lu/vuln/cve-2026-96200 <p><strong>Affected:</strong> Unknown Payments for Hubtel</p> <p>The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment.</p> <p><strong>Affected:</strong> Unknown Payments for Hubtel</p> <p>The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment.</p> https://vulnerability.circl.lu/vuln/cve-2026-96200