CyberRota
← Ana sayfaya dön

CVE-2026-1982

MEDIUM · CVSS 5.3

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-30T03:16:24.647 · Çekilme zamanı: 2026-07-30T06:08:55.836031+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-1982
Severity
MEDIUM
CVSS
5.3
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a user-supplied payment amount without server-side validation against the configured ZarinPal widget price. This makes it possible for unauthenticated attackers to submit arbitrary payment amounts to the ZarinPal gateway via the 'amount' parameter.