CVE-2022-27629: Videowhisper Micropayments

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors.

Affected products

• Videowhisper Micropayments: before 1.9.6 (fixed in 1.9.6)

Published 2022-04-20. Last modified 2026-06-17.