4 matches found
CVE-2026-119749
The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting a negative item quantity on a public payment form. Attackers can exploit the unchecked quantity value in processitem ...
CVE-2026-119749 GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass
The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting a negative item quantity on a public payment form. Attackers can exploit the unchecked quantity value in processitem ...
CVE-2026-119749
The GetPaid plugin for WordPress before version 2.8.63 contains an improper input validation vulnerability (CWE-1284). Unauthenticated attackers can bypass payment processing by submitting a negative item quantity via a public payment form. Specifically, the process_item() function fails to check...
EUVD-2026-117000
The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting a negative item quantity on a public payment form. Attackers can exploit the unchecked quantity value in processitem ...