CVE-2026-80341

The Payment Plugins for PayPal WooCommerce WordPress plugin (versions before 2.0.26 ) contains an IDOR vulnerability where it fails to verify that a stored payment method belongs to the user attempting to attach it. This allows any authenticated user, such as a subscriber, to bind another custome...