CVE-2026-81423

The Accept Stripe Payments WordPress plugin prior to 2.1.4 contains an open redirect vulnerability in its IPN (Instant Payment Notification) handler . A user-supplied URL is not validated before being used in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary exte...