CWE-345.

Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog

• notepad-plus-plus
• Command injection
• CWE-345

Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key

• GitroomHQ postiz-app
• Authentication bypass
• Denial of service

Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName

• laurent22 joplin
• CWE-345
• CWE-353

Insufficient verification of data authenticity in Eclipse Foundation Eclipse Open VSX

• Eclipse Foundation Eclipse Open VSX
• CWE-345

Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion

• Payment Gateway for PayPal on WooCommerce
• CWE-345

Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route

• Meow Gallery
• CWE-345

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

• CWE-345

<1.6.15 · fixed in 1.6.15

Azure Billing Elevation of Privilege Vulnerability

• Microsoft Azure Billing
• CWE-345

MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-up

• MythicalLTD MythicalDash
• Broken access control
• CWE-345

FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

• wpengine faustjs
• Broken access control
• CWE-345

libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

• Authentication bypass
• CWE-345

>=8.0.0, <12.0.24 · fixed in 12.0.24

libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

• Weak cryptography or TLS
• CWE-345

>=15.0.0, <16.0.5 · fixed in 16.0.5

mport mirror-selection ping accepts insufficiently validated ICMP replies

• MidnightBSD mport
• Memory corruption
• CWE-345

mport permits repository and package mirror fetches over insecure transport

• MidnightBSD mport
• Weak cryptography or TLS
• CWE-345

mport bootstrap index fetch can continue after hash verification failure

• MidnightBSD mport
• Weak cryptography or TLS
• CWE-345

Insufficient verification of data authenticity in Dell SmartFabric Manager

• Dell SmartFabric Manager
• CWE-345

WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability

• WP ManageNinja LLC FluentAuth
• CWE-345

Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback

• Robokassa payment gateway for Woocommerce
• CWE-345

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

• CWE-345

<2.0.0 · fixed in 2.0.0

djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)

• Broken access control
• CWE-345

<1.0.7 · fixed in 1.0.7

Insufficient verification of data authenticity in Jenkins Project Jenkins Bitbucket Server Integration Plugin

• Jenkins Project Jenkins Bitbucket Server Integration Plugin
• CWE-345

checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof

• ISC BIND 9
• CWE-345

Insufficient verification of data authenticity in Advantech EKI-1242IEIMS and others

• Advantech EKI-1242IEIMS
• Advantech EKI-1242EIMS
• CWE-345

ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

• ag-ui
• CWE-345
• CWE-346

Security Advisory 0171

• Arista Networks EOS
• CWE-345

Possible ZONEMD verification bypass window

• NLnet Labs Unbound
• CWE-345

Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay

• Eventin
• CWE-345

Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter

• Formidable Forms
• CWE-345

Security Advisory 0161

• Arista Networks EOS
• CWE-345

kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).

• CWE-345

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from…

• Arista Networks EOS
• CWE-345

Authentication bypass by spoofing in Eclipse Foundation Eclipse Data Plane Core

• Eclipse Foundation Eclipse Data Plane Core
• Authentication bypass
• CWE-345

Quads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL

• Quads Ads Manager for Google AdSense
• CWE-345

AVideo Missing Authorization via AD_Server log.php Wallet Credit

• WWBN AVideo
• CWE-345

Persian Elementor < 2.8.2 - Unauthenticated ZarinPal Payment Callback Authority Bypass

• Persian Elementor
• CWE-345

WC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook

• Payment Gateway PayPay for WooCommerce
• CWE-345

Insufficient verification of data authenticity in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• CWE-345

WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment

• WP Express Checkout
• CWE-345

XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider

• XenForo
• CWE-345

LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu

• lobehub
• CWE-345

ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass

• ePayco Payment Gateway for WooCommerce
• CWE-345

MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment

• moos-ivp
• CWE-345

MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping

• moos-ivp
• CWE-345

MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection

• themoos essential-moos
• CWE-345

MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing

• themoos essential-moos
• CWE-345

MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing

• moos-ivp
• CWE-345

WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability

• Nexcess BookIt
• CWE-345

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

• CWE-345
• CWE-436

<0.4.112 · fixed in 0.4.112

OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)

• Authentication bypass
• CWE-345

<1.0.3 || >=1.1.0, <1.1.3 || >=1.2.0-rc.1, <1.2.0-rc.2 · fixed in 1.0.3, 1.1.3, 1.2.0-rc.2

Insufficient verification of data authenticity in AMD Ryzen™ 3000 Series Desktop Processors and others

• AMD Ryzen™ 3000 Series Desktop Processors
• AMD Ryzen™ 5000 Series Desktop Processors
• CWE-345

Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

• Cisco Secure Email
• CWE-345

WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment

• WP Express Checkout
• CWE-345

CVE-2026-100872: Order total can be inflated after a Payment Request has started a gateway transaction, marking the order fully paid

• CWE-345

>=2.0.0, <2.1.0 || >=2.1.0, <2.1.16 || >=2.2.0, <2.2.9 · fixed in 2.1.0, 2.1.16, 2.2.9

DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

• Progress Software Telerik UI for ASP.NET AJAX
• Unrestricted file upload
• CWE-345

CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient

• CatalogX
• CWE-345

BEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticity

• BEN Group TubeBuddy for YouTube Extension
• CWE-345

Toggl OÜ Toggl Track Extension postMessage origin validation

• Toggl OÜ Toggl Track Extension
• CWE-345
• CWE-346

Google Cloud Build Comment Control Bypass via Webhook Suppression

• Google Cloud Build
• Race condition
• CWE-345

Linux Foundation Magma SecurityModeComplete integrity check

• Linux Foundation Magma
• CWE-345
• CWE-354

pac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequest

• pac4j
• CWE-345