Vulnerabilities

TI-2026-63880 CVE-2026-96818 · GHSA-wm3w-jj6x-f4wh

WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability

LOW 38

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00246 Published 2026-09-30 No fix listed CWE-862

TI-2026-36132 CVE-2026-48868 · GHSA-48rr-4889-hv7w

LOW 39

Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00278 Published 2026-06-15 No fix listed CWE-639

TI-2026-30975 CVE-2026-42752 · GHSA-q946-p8hr-8q7p

LOW 34

Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00222 Published 2026-06-15 No fix listed CWE-440