Skip to content
Threat Feed
Subscribe

Vendor

Klarna

2 briefs RSS
high advisory

Authorization Bypass in Klarna for WooCommerce Plugin

An authorization bypass vulnerability in the Klarna for WooCommerce plugin allows unauthenticated attackers to enumerate store orders and exfiltrate customer PII via the order-pay endpoint.

Klarna for WooCommerce web-application privacy vulnerability
1r 2t 1c
high advisory

JWR Phishing Framework Analysis

The JWR phishing framework is a sophisticated, operator-steered PhaaS platform that uses persistent WebSocket connections to capture PII, payment credentials, and device fingerprints in real-time.

Shopify Checkout +3 phishing credential-theft websocket saas
3t