Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Payment Plugins for PayPal WooCommerce 2.0.26 Clear all filters
TI-2026-55482 CVE-2026-80341 · GHSA-7838-p44c-rv6w

Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR

Priority LOW 26

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowing any authenticated user, such as a subscriber, to bind anot…

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00227 Published 2026-09-09 Fixed in 2.0.26 CWE-863
TI-2026-55481 CVE-2026-80340 · GHSA-43fh-8hgg-2q9m

Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay

Priority LOW 30

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated use…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-09 Fixed in 2.0.26 CWE-200