{"id":"CVE-2026-126543","published":"2026-11-11T01:17:15.727","lastModified":"2026-11-11T01:17:15.857","description":"WWBN AVideo through 29.7.1 contains an improper payment verification vulnerability in plugin/PayPalYPT/ipnV2.php that credits wallets from PayPal IPNs not bound to the site's merchant account. Unauthenticated attackers can forward genuine VERIFIED recurring-payment IPNs from their own PayPal account with a chosen users_id to add wallet balance each billing cycle.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-345"],"vendors":[],"products":[],"references":[{"url":"https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/PayPalYPT/ipnV2.php#L87-L125","tags":[]},{"url":"https://github.com/WWBN/AVideo/commit/98406b7944e035e72082665ac886d78fc3af0a7f","tags":[]},{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-5gg3-9jhh-xf86","tags":[]},{"url":"https://www.vulncheck.com/advisories/wwbn-avideo-through-29.7.1-wallet-credit-manipulation-via-paypalypt-ipnv2-php","tags":[]}],"exploitRefs":[{"url":"https://github.com/WWBN/AVideo/blob/v29.7.1/plugin/PayPalYPT/ipnV2.php#L87-L125","tags":[]},{"url":"https://github.com/WWBN/AVideo/commit/98406b7944e035e72082665ac886d78fc3af0a7f","tags":[]},{"url":"https://github.com/WWBN/AVideo/security/advisories/GHSA-5gg3-9jhh-xf86","tags":[]}],"hasPoc":true,"ai":null}