Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
PayPlug for WooCommerce (Official) CVE-2026-113813
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check on a set of unauthenticated AJAX actions
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
PayPlug for WooCommerce (Official) CVE-2026-110292
The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, a
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit