Lucene search
+L

2 matches found

Patchstack
Patchstack
•added 2026/08/27 10:58 a.m.•16 views

WordPress Restore PayPal Standard for WooCommerce plugin < 3.1.1 - Payment Bypass via Unvalidated receiver_email vulnerability

Payment Bypass via Unvalidated receiveremail vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Accept PayPal & Stripe with Subscriptions for WooCommerce versions 3.1.1...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/10 6:00 a.m.•17 views

CVE-2026-17012 Restore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via Unvalidated receiver_email

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order...

5.9AI score0.00294EPSS
SaveExploits0References1
Rows per page
Query Builder