Threats tagged 'ghsa-hfq8-7m72-899r'

The Forminator Forms WordPress plugin versions before 1.58.4 have a vulnerability where the plugin does not verify that a Stripe Checkout payment has completed before returning the post-payment redirect URL and thank-you message. This allows unauthenticated visitors to access payment-gated form responses without actually paying.