Stripe Payment Forms by WP Full Pay vulnerabilities
We track 1 vulnerability in Stripe Payment Forms by WP Full Pay products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Stripe Payment Forms by WP Full Pay vulnerabilities
- 7.5 High severity
Stripe Payment Forms by WP Full Pay: Missing Authorization
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 does not verify that the caller owns the Stripe payment intent referenced by two unauthenticated payment-form AJAX actions, allowing an unauthenticated visitor — using a nonce that is embedd