WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.1.1 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Legion Hunter in WordPress Plugin WPFormify – Stripe Payments with Form and Checkout versions = 1.1.1...

CVE-2026-6627

The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to unauthorized modification and deletion of Stripe payment credentials in all versions up to, and including, 1.1.1. This is due to missing capability checks and nonce verification on the...

CVE-2026-6627

WPFormify – Stripe Payments with Form and Checkout plugin for WordPress: CVE-2026-6627, all versions

WordPress WPFormify – Stripe Payments with Form and Checkout Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software WPFormify – Stripe Payments with Form and Checkout Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a0de1f6b1382 Credits...

WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPFormify – Stripe Payments with Form and Checkout plugin versions = 1.0.0. Solution Update the WordPress WPFormify – Stripe Payments with Form and Checkout plugin to the latest available version at least 1.1.0...

WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WPFormify – Stripe Payments with Form and Checkout plugin versions = 1.0.0. Solution Update the WordPress WPFormify – Stripe Payments with Form and Checkout plugin to the latest available version at...