payment vulnerabilities