agentprime: CWE-472Every new CWE-472 Advisory and CVE.https://agentprime.io/CVE-2026-115450: Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifierhttps://agentprime.io/advisories/CVE-2026-115450/https://agentprime.io/advisories/CVE-2026-115450/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 15:13:37 GMTCVECVE-2026-16453: Mattermost SAML RelayState forgery allows unauthorized team membershiphttps://agentprime.io/advisories/CVE-2026-16453/https://agentprime.io/advisories/CVE-2026-16453/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 07:08:48 GMTCVECVE-2026-111447: Wheels: Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key…https://agentprime.io/advisories/CVE-2026-111447/https://agentprime.io/advisories/CVE-2026-111447/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 03:39:51 GMTCVECVE-2026-77470: Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST requesthttps://agentprime.io/advisories/CVE-2026-77470/https://agentprime.io/advisories/CVE-2026-77470/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 16:36:09 GMTCVECVE-2026-55384: InvoiceShelf trusts client-supplied document totalshttps://agentprime.io/advisories/CVE-2026-55384/https://agentprime.io/advisories/CVE-2026-55384/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:17:25 GMTCVECVE-2026-103671: External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".https://agentprime.io/advisories/CVE-2026-103671/https://agentprime.io/advisories/CVE-2026-103671/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 08:12:13 GMTCVECVE-2026-103080: WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-103080/https://agentprime.io/advisories/CVE-2026-103080/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 17:32:51 GMTCVECVE-2026-107636: pH7Builder before 18.5.1 Payment Bypass via Payment Module MainControllerhttps://agentprime.io/advisories/CVE-2026-107636/https://agentprime.io/advisories/CVE-2026-107636/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:10:34 GMTCVECVE-2026-107363: OpenStack Zaqar: In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project…https://agentprime.io/advisories/CVE-2026-107363/https://agentprime.io/advisories/CVE-2026-107363/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:08:47 GMTCVECVE-2026-105322: Magee Shortcodes <= 2.1.1 - Unauthenticated Mail Relay via Contact Formhttps://agentprime.io/advisories/CVE-2026-105322/https://agentprime.io/advisories/CVE-2026-105322/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 06:47:52 GMTCVECVE-2026-91020: WebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amounthttps://agentprime.io/advisories/CVE-2026-91020/https://agentprime.io/advisories/CVE-2026-91020/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:56:52 GMTCVECVE-2026-90987: Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Pricehttps://agentprime.io/advisories/CVE-2026-90987/https://agentprime.io/advisories/CVE-2026-90987/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:56:52 GMTCVECVE-2026-86838: Bookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulationhttps://agentprime.io/advisories/CVE-2026-86838/https://agentprime.io/advisories/CVE-2026-86838/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 06:19:20 GMTCVECVE-2026-94374: MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reportshttps://agentprime.io/advisories/CVE-2026-94374/https://agentprime.io/advisories/CVE-2026-94374/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 12:25:02 GMTCVECVE-2026-85010: RestroPress < 3.4.6 - Unauthenticated Price Manipulation via Cart Add-onshttps://agentprime.io/advisories/CVE-2026-85010/https://agentprime.io/advisories/CVE-2026-85010/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 08:51:51 GMTCVECVE-2026-82189: Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7https://agentprime.io/advisories/CVE-2026-82189/https://agentprime.io/advisories/CVE-2026-82189/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 18:46:54 GMTCVECVE-2026-84762: WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerabilityhttps://agentprime.io/advisories/CVE-2026-84762/https://agentprime.io/advisories/CVE-2026-84762/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 16:31:48 GMTCVECVE-2026-77999: Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6https://agentprime.io/advisories/CVE-2026-77999/https://agentprime.io/advisories/CVE-2026-77999/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 11:58:00 GMTCVECVE-2026-84654: Jenkins: In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6…https://agentprime.io/advisories/CVE-2026-84654/https://agentprime.io/advisories/CVE-2026-84654/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 15:40:44 GMTCVECVE-2026-77794: RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantityhttps://agentprime.io/advisories/CVE-2026-77794/https://agentprime.io/advisories/CVE-2026-77794/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 14:16:50 GMTCVECVE-2026-67363: Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2https://agentprime.io/advisories/CVE-2026-67363/https://agentprime.io/advisories/CVE-2026-67363/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:00:45 GMTCVECVE-2026-15045: Wallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet Amounthttps://agentprime.io/advisories/CVE-2026-15045/https://agentprime.io/advisories/CVE-2026-15045/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 11:23:57 GMTCVECVE-2026-16620: WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Modehttps://agentprime.io/advisories/CVE-2026-16620/https://agentprime.io/advisories/CVE-2026-16620/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:17:17 GMTCVECVE-2026-16067: Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket Pricehttps://agentprime.io/advisories/CVE-2026-16067/https://agentprime.io/advisories/CVE-2026-16067/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:14:40 GMTCVECVE-2026-15149: WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulationhttps://agentprime.io/advisories/CVE-2026-15149/https://agentprime.io/advisories/CVE-2026-15149/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:07:32 GMTCVECVE-2026-10524: CoCart < 4.9.0 - Unauthenticated Arbitrary Price Manipulationhttps://agentprime.io/advisories/CVE-2026-10524/https://agentprime.io/advisories/CVE-2026-10524/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:07:30 GMTCVEGhost: Paid gift memberships obtainable at minimal cost via the donations featurehttps://agentprime.io/advisories/GHSA-xm43-3m56-w3wf/https://agentprime.io/advisories/GHSA-xm43-3m56-w3wf/ghost >=6.27.0, <6.44.0, fixed in 6.44.0. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 04 Aug 2026 21:57:48 GMTnpmghostCVE-2026-1982: Persian Elementor (المنتور فارسی) <= 2.8.1 - Unauthenticated Price Manipulation via ZarinPal Widgethttps://agentprime.io/advisories/CVE-2026-1982/https://agentprime.io/advisories/CVE-2026-1982/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 03:03:21 GMTCVECVE-2026-7484: Improper Access Control in Abis Technology's AVESİShttps://agentprime.io/advisories/CVE-2026-7484/https://agentprime.io/advisories/CVE-2026-7484/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 12:26:36 GMTCVECVE-2026-65052: Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio Fieldshttps://agentprime.io/advisories/CVE-2026-65052/https://agentprime.io/advisories/CVE-2026-65052/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 14:36:07 GMTCVECVE-2026-16089: Keycloak-services: keycloak-services: authorization codes can be retargeted to another client sessionhttps://agentprime.io/advisories/CVE-2026-16089/https://agentprime.io/advisories/CVE-2026-16089/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 14:15:43 GMTCVECVE-2026-56877: The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token.https://agentprime.io/advisories/CVE-2026-56877/https://agentprime.io/advisories/CVE-2026-56877/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 21:51:43 GMTCVECVE-2026-14430: Google Chrome: Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker…https://agentprime.io/advisories/CVE-2026-14430/https://agentprime.io/advisories/CVE-2026-14430/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 22:21:49 GMTCVECVE-2026-14389: Google Chrome: Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote…https://agentprime.io/advisories/CVE-2026-14389/https://agentprime.io/advisories/CVE-2026-14389/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 22:21:48 GMTCVECVE-2026-14387: Google Chrome: Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote…https://agentprime.io/advisories/CVE-2026-14387/https://agentprime.io/advisories/CVE-2026-14387/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 22:21:48 GMTCVEcriticalCVE-2026-14391: Google Chrome: Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a…https://agentprime.io/advisories/CVE-2026-14391/https://agentprime.io/advisories/CVE-2026-14391/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 22:21:47 GMTCVECVE-2026-14069: Google Chrome: Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote…https://agentprime.io/advisories/CVE-2026-14069/https://agentprime.io/advisories/CVE-2026-14069/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:39:15 GMTCVECVE-2026-13974: Google Chrome: Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed…https://agentprime.io/advisories/CVE-2026-13974/https://agentprime.io/advisories/CVE-2026-13974/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:38:41 GMTCVECVE-2026-13938: Google Chrome: Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote…https://agentprime.io/advisories/CVE-2026-13938/https://agentprime.io/advisories/CVE-2026-13938/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:38:28 GMTCVECVE-2026-13841: Google Chrome: Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote…https://agentprime.io/advisories/CVE-2026-13841/https://agentprime.io/advisories/CVE-2026-13841/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:37:52 GMTCVECVE-2026-13801: Google Chrome: Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote…https://agentprime.io/advisories/CVE-2026-13801/https://agentprime.io/advisories/CVE-2026-13801/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:37:38 GMTCVECVE-2026-13796: Google Chrome: Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote…https://agentprime.io/advisories/CVE-2026-13796/https://agentprime.io/advisories/CVE-2026-13796/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 22:37:36 GMTCVEcriticalCVE-2026-13281: Google Chrome: Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote…https://agentprime.io/advisories/CVE-2026-13281/https://agentprime.io/advisories/CVE-2026-13281/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:51:33 GMTCVECVE-2026-42655: WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42655/https://agentprime.io/advisories/CVE-2026-42655/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:18:38 GMTCVECVE-2025-59382: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)https://agentprime.io/advisories/CVE-2025-59382/https://agentprime.io/advisories/CVE-2025-59382/CVSS 1.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 01:38:20 GMTCVECVE-2026-11678: Google Chrome: Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote…https://agentprime.io/advisories/CVE-2026-11678/https://agentprime.io/advisories/CVE-2026-11678/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 23:27:49 GMTCVECVE-2026-11669: Google Chrome: Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed…https://agentprime.io/advisories/CVE-2026-11669/https://agentprime.io/advisories/CVE-2026-11669/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 23:27:44 GMTCVECVE-2026-11655: Google Chrome: Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a…https://agentprime.io/advisories/CVE-2026-11655/https://agentprime.io/advisories/CVE-2026-11655/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 23:27:36 GMTCVECVE-2026-11640: Google Chrome: Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote…https://agentprime.io/advisories/CVE-2026-11640/https://agentprime.io/advisories/CVE-2026-11640/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jun 2026 23:27:28 GMTCVECVE-2026-11290: Integer overflow in Google Chromehttps://agentprime.io/advisories/CVE-2026-11290/https://agentprime.io/advisories/CVE-2026-11290/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 23:06:20 GMTCVE