WordPress WP Easy Pay – Payment and Donation form Builder for Square plugin <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Status Modification vulnerability discovered by PRISM in WordPress Plugin WP EasyPay versions = 4.5.0...

CVE-2026-32587

CVE-2026-32587 describes a Missing Authorization vulnerability in the WordPress plugin WP Easy Pay – Payment and Donation form Builder for Square . Affected range: WP Easy Pay versions from unknown start up to and including 4.2.11 . Root cause per description: access control misconfiguration that...