CVE-2026-17016

The CVE-2026-17016 entry affects the “Accept PayPal & Stripe with Subscriptions for WooCommerce” WordPress plugin up to version 3.1.0. The root cause is that the PayPal Data Transfer return handler does not validate the amount paid against the order total, enabling a customer to underpay while th...