38 matches found
By-Poloss..-..CVE-2026-12432-PoC
CVE-2026-12432: WP Full Stripe Free = 8.4.4 Publicado : 26 de junio de 2026 Última actualización : 27 de junio de 2026 Investigador : Netwurm - VTDR e.V.i.G. Descripción de la Vulnerabilidad El plugin WP Full Stripe Free para WordPress es vulnerable a Autorización Faltante en versiones hasta, e...
CVE-2026-62073
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-62073 WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-62073 WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
EUVD-2026-90853
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-62073
The WP Full Stripe Free WordPress plugin (versions
WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Full Stripe Free versions = 8.5.6...
PT-2026-103882
Name of the Vulnerable Software and Affected Versions WP Full Stripe Free versions prior to 8.5.7 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 8.5.6...
CVE-2026-62073: Missing Authorization
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-61960
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-61960
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-61960
WP Full Stripe Free plugin <= 8.5.0 contains an unauthenticated Cross Site Scripting (XSS) vulnerability. Affected software: WordPress WP Full Stripe Free (versions
CVE-2026-61960 WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
EUVD-2026-57968
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-61960 WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-61960: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
PT-2026-71534
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
📄 WordPress WP Full Stripe Free 8.4.3 Missing Authorization
The WP Full Stripe Free plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. CVE-2026-12432: WP Full Stripe Free = 8.4.4 - Published: June 26, 2026 - Last Updated: June 27, 2026 - Researcher: Netwurm...
CVE-2026-12432: Missing Authorization
The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. The handler is registered through both wpajax and wpajaxnopriv hooks and the underlying updatefailedpaymentstatus function...