Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Paymattic
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-89411 | 1 Wordpress-extensions | 1 Paymattic | 2026-09-28 | 5.3 Medium |
| The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it. | ||||
Page 1 of 1.