CVE-2026-81423

The Accept Stripe Payments WordPress plugin (versions before 2.1.4 ) is vulnerable to an open redirect via its IPN (Instant Payment Notification) handler , which fails to validate a user-supplied URL before using it in a redirect. This allows unauthenticated attackers to redirect visitors to an a...