CVE-2026-77758 Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session

Stripe Payment Forms by WP Full Pay , a WordPress plugin, before version 8.5.1 fails to properly verify that a customer portal session has completed its confirmation step before returning data. This allows unauthenticated users to read another customer's subscription and billing information , con...