CVE-2025-14487

The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify Stripe payment configuration settings, including publishable...

CVE-2025-14487 Handily <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' Parameter

The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify Stripe payment configuration settings, including publishable...

CVE-2025-14487 Handily <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' Parameter

The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify Stripe payment configuration settings, including publishable...

CVE-2025-14487

The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification in all versions up to and including 1.0.3 . The root cause is missing authorization checks within the payment settings parameters, allowing unauthenticated attackers to modify Stripe configuration setting...

EUVD-2025-210984

The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify Stripe payment configuration settings, including publishable...

PT-2026-96658

Name of the Vulnerable Software and Affected Versions Handily plugin for WordPress versions prior to 1.0.4 Description Missing authorization checks allow unauthenticated attackers to modify Stripe payment configuration settings. By manipulating payment settings parameters, an attacker can change...

CVE-2025-14487: Missing Authorization

The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to modify Stripe payment configuration settings, including publishable...

WordPress Handily plugin <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification vulnerability

Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification vulnerability discovered by Phat RiO in WordPress Plugin Handily versions = 1.0.3...