Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
Formidable Forms WordPress flaw enables unauthenticated attackers to pay a small amount and have a more expensive transaction marked as paid.