CVE-2026-119747

The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the checkpostpermissions method in includes/api/class-getpaid-rest-posts-controller.php maps REST operations to generic WordPress post capabilities instead of enforcing the plugin's...

CVE-2026-119747

The GetPaid plugin for WordPress (versions before 2.8.63 ) contains an incorrect authorization vulnerability in the check_post_permissions() method located in includes/api/class-getpaid-rest-posts-controller.php. The flaw occurs because REST operations are mapped to generic WordPress post capabil...

CVE-2026-119747 GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API

The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the checkpostpermissions method in includes/api/class-getpaid-rest-posts-controller.php maps REST operations to generic WordPress post capabilities instead of enforcing the plugin's...

EUVD-2026-116998

The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the checkpostpermissions method in includes/api/class-getpaid-rest-posts-controller.php maps REST operations to generic WordPress post capabilities instead of enforcing the plugin's...