WPForms bug allows Stripe refunds on millions of WordPress sites

Published on December 10, 2024

A vulnerability in WPForms, a WordPress plugin used in over 6 million websites, could allow subscriber-level users to issue arbitrary Stripe refunds or cancel subscriptions. [...]

Continue reading on website
Other news

Ivanti warns of maximum severity CSA auth bypass vulnerability

December 10, 2024
Ivanti warned customers on Tuesday about a new maximum-severity authentication bypass vulnerability in its Cloud Services Appliance (CSA) solution. [...]

Wyden proposes bill to secure US telecoms after Salt Typhoon hacks

December 10, 2024
U.S. Senator Ron Wyden of Oregon announced a new bill to secure the networks of American telecommunications companies breached by Salt Typhoon Chinese state hackers earlier this year. [...]