Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at ...
Formidable Forms WordPress flaw enables unauthenticated attackers to pay a small amount and have a more expensive transaction marked as paid.