{"id":"CVE-2026-123486","published":"2026-11-06T15:17:17.763","lastModified":"2026-11-11T03:16:49.303","description":"WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both requests pass isRecurringPaymentIdUsed(), obtaining duplicate wallet credits and subscription renewals.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-367"],"vendors":[],"products":[],"references":[{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-q77r-9mjq-mjw6","tags":[]},{"url":"https://www.vulncheck.com/advisories/wwbn-avideo-29.0-through-29.4.0-race-condition-in-paypal-ipn-deduplication-via-ipn-php","tags":[]},{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-q77r-9mjq-mjw6","tags":[]}],"exploitRefs":[{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-q77r-9mjq-mjw6","tags":[]},{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-q77r-9mjq-mjw6","tags":[]}],"hasPoc":true,"ai":null}