Approved changes feed: RSS · Atom

cpe:2.3:a:mohammadr3z:المنتور_فارسی:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMohammadr3Z (eddef3e0-ff2b-5433-a46c-0323c366d1cc)
Productالمنتور فارسی (d3cd3974-1fc2-5332-bcc0-2f4add71a5e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1982 vulnerable 2026-09-16 04:33:42.007106 Persian Elementor (المنتور فارسی) <= 2.8.1 - Unauthenticated Price Manipulation via ZarinPal Widget
MEDIUM (5.3)
The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a user-supplied payment amount without server-side validation against the configured ZarinPal widget price. This makes it possible for unauthenticated attackers to submit arbitrary payment amounts to the ZarinPal gateway via the 'amount' parameter.
Published: 2026-07-30T03:03:21.778Z
Updated: 2026-07-30T15:51:47.194Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.