Threats tagged 'ghsa-4h7v-8qrm-x2jj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-16990Payment Button for PayPal (WordPress plugin) · Client-Side Enforcement of Server-Side Security Medium5.3EPSS 0.3%2026-08-12CVE Database V5CVE-2026-16990 The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount. EPSS 0.3%Vulnerability CWE-602 #ghsa-4h7v-8qrm-x2jj	CVE Database V5	2026-08-12

Page 1 of 1