CVE-2026-17012

The vulnerability affects the WordPress plugin Accept PayPal & Stripe with Subscriptions for WooCommerce (WordPress plugin, up to version 3.1.0 ). The root cause is that the plugin does not verify that the PayPal account receiving the payment matches the merchant’s configured account before marki...