CVE-2026-17012

The CVE-2026-17012 affects the WordPress plugin “Accept PayPal & Stripe with Subscriptions for WooCommerce” up to version 3.1.0. The underlying issue is that the plugin does not verify that the PayPal account receiving a payment matches the merchant’s configured account before marking the order a...