CVE-2026-77789

The Stripe Payment Forms by WP Full Pay WordPress plugin (versions before 8.5.1 ) contains a Cross-Customer Subscription Modification vulnerability. The root cause is a failure to verify that a subscription belongs to the specific customer associated with the requesting customer-portal session. T...