2026年9月9日

CVE-2026-83537 [MEDIUM] – The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a p

未分类

📑 文章目录

The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying.

相关文章