Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: wphostingdev Clear all filters
TI-2026-85061 CVE-2026-121970 · GHSA-x965-w74v-3qc3

Webhook signature forgery in Vipps and MobilePay for WooCommerce

Priority LOW 27

Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 contains an improper cryptographic signature verification vulnerability in the recurring-payment webhook handler that allows unauthenticated attackers…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00187 Published 2026-11-04 Fixed in 6.4.1 CWE-347
TI-2024-10930 CVE-2024-11786 · GHSA-x83w-hjxp-3f76

Login with Vipps and MobilePay <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Login with Vipps and MobilePay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'continue-with-vipps' shortcode in all versions up to, and including, 1.3.3 due to insufficient input…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00402 Published 2024-11-28 No fix listed CWE-79