Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Wp Express Checkout Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-83533 1 Wordpress-extensions 1 Wp Express Checkout 2026-11-11 5.3 Medium
The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying.