# CWE-472.

Every Advisory and CVE whose sources give the weakness CWE-472, newest first.

## Records, newest first

- [Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier](https://agentprime.io/advisories/CVE-2026-115450.md)
  `CVE-2026-115450` · CVE record: MarcosCamara01 Ecommerce Template · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-472
- [Mattermost SAML RelayState forgery allows unauthorized team membership](https://agentprime.io/advisories/CVE-2026-16453.md)
  `CVE-2026-16453` · CVE record: Mattermost Mattermost · CVSS 7.1 High · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-472
- [Wheels: Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key…](https://agentprime.io/advisories/CVE-2026-111447.md)
  `CVE-2026-111447` · CVE record: Wheels Wheels · CVSS 8.1 High · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-472
- [Lychee: Webshop checkout lets the client override the payment \`amount\` sent to the gateway via malicious crafted POST request](https://agentprime.io/advisories/CVE-2026-77470.md)
  `CVE-2026-77470` · CVE record: LycheeOrg Lychee · CVSS 8.3 High · Not analysed yet · Published 15 Oct 2026 · Tags: Broken access control, CWE-20, CWE-472
- [InvoiceShelf trusts client-supplied document totals](https://agentprime.io/advisories/CVE-2026-55384.md)
  `CVE-2026-55384` · CVE record: InvoiceShelf InvoiceShelf · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Broken access control, CWE-472
- [External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".](https://agentprime.io/advisories/CVE-2026-103671.md)
  `CVE-2026-103671` · CVE record: EC-CUBE CO.,LTD. AmazonPay V2 Plugin (4.0/4.1 series) and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-472
- [WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-103080.md)
  `CVE-2026-103080` · CVE record: VillaTheme Salevo · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-472
- [pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController](https://agentprime.io/advisories/CVE-2026-107636.md)
  `CVE-2026-107636` · CVE record: ph7software ph7builder · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-472
- [OpenStack Zaqar: In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project…](https://agentprime.io/advisories/CVE-2026-107363.md)
  `CVE-2026-107363` · CVE record: OpenStack Zaqar · CVSS 6.1 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-472
- [Magee Shortcodes <= 2.1.1 - Unauthenticated Mail Relay via Contact Form](https://agentprime.io/advisories/CVE-2026-105322.md)
  `CVE-2026-105322` · CVE record: Unknown Magee Shortcodes · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-472
- [WebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amount](https://agentprime.io/advisories/CVE-2026-91020.md)
  `CVE-2026-91020` · CVE record: Unknown WebToffee Gift Cards for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-472
- [Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price](https://agentprime.io/advisories/CVE-2026-90987.md)
  `CVE-2026-90987` · CVE record: Unknown Easy PayPal & Stripe Buy Now Button · CVSS 5.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-472
- [Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation](https://agentprime.io/advisories/CVE-2026-86838.md)
  `CVE-2026-86838` · CVE record: Unknown Bookly · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-472
- [MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports](https://agentprime.io/advisories/CVE-2026-94374.md)
  `CVE-2026-94374` · CVE record: MISP MISP · CVSS 8.3 High · Not analysed yet · Published 21 Sept 2026 · Tags: Broken access control, CWE-472
- [RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-ons](https://agentprime.io/advisories/CVE-2026-85010.md)
  `CVE-2026-85010` · CVE record: Unknown RestroPress · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-472
- [Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7](https://agentprime.io/advisories/CVE-2026-82189.md)
  `CVE-2026-82189` · CVE record: j2commerce.com J2Store extension for Joomla · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-472, CWE-602
- [WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability](https://agentprime.io/advisories/CVE-2026-84762.md)
  `CVE-2026-84762` · CVE record: Saad Iqbal WP EasyPay · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-472
- [Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6](https://agentprime.io/advisories/CVE-2026-77999.md)
  `CVE-2026-77999` · CVE record: j2commerce.com J2Store extension for Joomla · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: CWE-472, CWE-602
- [Jenkins: In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6…](https://agentprime.io/advisories/CVE-2026-84654.md)
  `CVE-2026-84654` · CVE record: Jenkins Project Jenkins · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-472
- [RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity](https://agentprime.io/advisories/CVE-2026-77794.md)
  `CVE-2026-77794` · CVE record: Unknown RegistrationMagic · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-472
- [Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2](https://agentprime.io/advisories/CVE-2026-67363.md)
  `CVE-2026-67363` · CVE record: balbooa.com Balbooa Forms extension for Joomla · CVSS 7.7 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-472, CWE-602
- [Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amount](https://agentprime.io/advisories/CVE-2026-15045.md)
  `CVE-2026-15045` · CVE record: Unknown Wallet System for WooCommerce · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-472
- [WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Mode](https://agentprime.io/advisories/CVE-2026-16620.md)
  `CVE-2026-16620` · CVE record: Unknown WPC Name Your Price for WooCommerce · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-472
- [Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket Price](https://agentprime.io/advisories/CVE-2026-16067.md)
  `CVE-2026-16067` · CVE record: Unknown Event Booking Manager for WooCommerce (Pro) · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-472
- [WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation](https://agentprime.io/advisories/CVE-2026-15149.md)
  `CVE-2026-15149` · CVE record: Unknown WP Hotel Booking · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-20, CWE-472
- [CoCart < 4.9.0 - Unauthenticated Arbitrary Price Manipulation](https://agentprime.io/advisories/CVE-2026-10524.md)
  `CVE-2026-10524` · CVE record: Unknown CoCart · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-472
- [Ghost: Paid gift memberships obtainable at minimal cost via the donations feature](https://agentprime.io/advisories/GHSA-xm43-3m56-w3wf.md)
  `GHSA-xm43-3m56-w3wf`, `BIT-ghost-2026-59817`, `CVE-2026-59817` · npm `ghost`: affected `>=6.27.0, <6.44.0`, fixed in `6.44.0` · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Broken access control, CWE-472
- [Persian Elementor (المنتور فارسی) <= 2.8.1 - Unauthenticated Price Manipulation via ZarinPal Widget](https://agentprime.io/advisories/CVE-2026-1982.md)
  `CVE-2026-1982` · CVE record: mohammadr3z المنتور فارسی · CVSS 5.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-472
- [Improper Access Control in Abis Technology's AVESİS](https://agentprime.io/advisories/CVE-2026-7484.md)
  `CVE-2026-7484` · CVE record: ABIS Technology Ltd. Co. AVESİS · CVSS 5.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-472
- [Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fields](https://agentprime.io/advisories/CVE-2026-65052.md)
  `CVE-2026-65052` · CVE record: Saturday Drive Ninja Forms · CVSS 8.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: CWE-472
- [Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session](https://agentprime.io/advisories/CVE-2026-16089.md)
  `CVE-2026-16089` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Authentication bypass, CWE-472
- [The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token.](https://agentprime.io/advisories/CVE-2026-56877.md)
  `CVE-2026-56877` · CVE record: Skillable SCORM Lab Launch Integration · CVSS 6.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-14430.md)
  `CVE-2026-14430` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote…](https://agentprime.io/advisories/CVE-2026-14389.md)
  `CVE-2026-14389` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote…](https://agentprime.io/advisories/CVE-2026-14387.md)
  `CVE-2026-14387` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a…](https://agentprime.io/advisories/CVE-2026-14391.md)
  `CVE-2026-14391` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote…](https://agentprime.io/advisories/CVE-2026-14069.md)
  `CVE-2026-14069` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed…](https://agentprime.io/advisories/CVE-2026-13974.md)
  `CVE-2026-13974` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote…](https://agentprime.io/advisories/CVE-2026-13938.md)
  `CVE-2026-13938` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote…](https://agentprime.io/advisories/CVE-2026-13841.md)
  `CVE-2026-13841` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote…](https://agentprime.io/advisories/CVE-2026-13801.md)
  `CVE-2026-13801` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote…](https://agentprime.io/advisories/CVE-2026-13796.md)
  `CVE-2026-13796` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote…](https://agentprime.io/advisories/CVE-2026-13281.md)
  `CVE-2026-13281` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-472
- [WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability](https://agentprime.io/advisories/CVE-2026-42655.md)
  `CVE-2026-42655` · CVE record: WPManageNinja Best Payments Plugin for WP · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-472
- [QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)](https://agentprime.io/advisories/CVE-2025-59382.md)
  `CVE-2025-59382` · CVE record: QNAP Systems Inc. QTS and 2 more · CVSS 1.2 Low · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote…](https://agentprime.io/advisories/CVE-2026-11678.md)
  `CVE-2026-11678` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-472
- [Google Chrome: Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed…](https://agentprime.io/advisories/CVE-2026-11669.md)
  `CVE-2026-11669` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a…](https://agentprime.io/advisories/CVE-2026-11655.md)
  `CVE-2026-11655` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote…](https://agentprime.io/advisories/CVE-2026-11640.md)
  `CVE-2026-11640` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 8 Jun 2026 · Tags: CWE-472
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-11290.md)
  `CVE-2026-11290` · CVE record: Google Chrome · CVSS 5.0 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Memory corruption, CWE-472
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-11281.md)
  `CVE-2026-11281` · CVE record: Google Chrome · CVSS 5.0 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Memory corruption, CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-11211.md)
  `CVE-2026-11211` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote…](https://agentprime.io/advisories/CVE-2026-11171.md)
  `CVE-2026-11171` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-11088.md)
  `CVE-2026-11088` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: Memory corruption, CWE-472
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-11085.md)
  `CVE-2026-11085` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: Memory corruption, CWE-472
- [Google Chrome: Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53…](https://agentprime.io/advisories/CVE-2026-11058.md)
  `CVE-2026-11058` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-11044.md)
  `CVE-2026-11044` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Memory corruption, CWE-472
- [Google Chrome: Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…](https://agentprime.io/advisories/CVE-2026-10987.md)
  `CVE-2026-10987` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10986.md)
  `CVE-2026-10986` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472
- [Google Chrome: Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote…](https://agentprime.io/advisories/CVE-2026-10965.md)
  `CVE-2026-10965` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-472

Older: <https://agentprime.io/advisories/tag/cwe-472.md?cursor=WyIyMDI2LTA2LTA0VDIzOjAzOjU4LjkxNTAwMFoiLCJDVkUtMjAyNi0xMDk2NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-472>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-472/>. Everything for agents: <https://agentprime.io/llms.txt>.