paymenter/paymenter
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade) | paymenter/paymenter | Composer | Medium | Fix reported | |
| Paymenter has race condition in payWithCredit() that enables credit double-spend | paymenter/paymenter | Composer | Medium | Fix reported | |
| Paymenter has URL parameter injection that bypasses paid plan limits at checkout | paymenter/paymenter | Composer | High | Fix reported | |
| Paymenter vulnerable to Remote Code Execution via public file uploads | paymenter/paymenter | Composer | Critical | Fix reported | |
| Paymenter doesn't reset email verification status after email change | paymenter/paymenter | Composer | Medium | Fix reported | |
| Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module | paymenter/paymenter | Composer | Medium | Fix reported | |
| Paymenter has broken object level authorization via service reference manipulation on ticket creation | paymenter/paymenter | Composer | Medium | Fix reported |