CVE-2026-1982 – Persian Elementor (المنتور فارسی)

CVE ID :CVE-2026-1982

Published : July 30, 2026, 3:16 a.m. | 28 minutes ago

Description :The Persian Elementor (المنتور فارسی) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a user-supplied payment amount without server-side validation against the configured ZarinPal widget price. This makes it possible for unauthenticated attackers to submit arbitrary payment amounts to the ZarinPal gateway via the ‘amount’ parameter.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…