Review
Coinsnap
CVE published 2026-10-16
CVE-2026-92427
The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 discloses its payment gateway webhook secret to unauthenticated users, allowing them to forge payment-confirmation notifications and record arbitrary donations. This vulnerability enables attackers to manipulate donation records, potentially leading to financial losses and reputational damage for affected organizations. Defenders should asse [truncated]