#Wordpress WPForms #vulnerability CVE-2024-11205 impacts over 6mln websites allowing any unprivileged authenticated users to perform Stripe refunds:
👇
https://www.bleepingcomputer.com/news/security/wpforms-bug-allows-stripe-refunds-on-millions-of-wordpress-sites/
Sam Stepanyan :verified: 🐘 /
npub18d…rltg5
2024-12-11 12:23:36
Author Public Key
npub18d0arwv295u03fd825dvn5eharfx25rtrkemffxnar9dzn82drtssrltg5Published at
2024-12-11 12:23:36Event JSON
{
"id": "5fb417f475a30e2bb5c27b9ad47bce65457f9ff5368aed4ba484bf30e3a3898a",
"pubkey": "3b5fd1b98a2d38f8a5a7551ac9d337e8d265506b1db3b4a4d3e8cad14cea68d7",
"created_at": 1733919816,
"kind": 1,
"tags": [
[
"t",
"wordpress"
],
[
"t",
"vulnerability"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/113634169119404763",
"activitypub"
]
],
"content": "#Wordpress WPForms #vulnerability CVE-2024-11205 impacts over 6mln websites allowing any unprivileged authenticated users to perform Stripe refunds:\n👇\nhttps://www.bleepingcomputer.com/news/security/wpforms-bug-allows-stripe-refunds-on-millions-of-wordpress-sites/",
"sig": "0c5c23206dc7841821761266326d18ca0697c0490d7fbed58029a94d4e1a68751fbfa68f3c22b8a90d17cbf89235df49a567474bf1f54a07f5694fb6c01e19b1"
}