Threats tagged 'ghsa-645w-cxcg-9mjc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-17012Accept PayPal & Stripe with Subscriptions for WooCommerce (WordPress plugin) · Improper Access Control Medium5.3EPSS 0.3%2026-08-10CVE Database V5CVE-2026-17012 The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order by paying the full amount to their own PayPal account instead of the merchant's. EPSS 0.3%Vulnerability CWE-284 #ghsa-645w-cxcg-9mjc	CVE Database V5	2026-08-10

Page 1 of 1