Security Advisory

CVE-2026-77758

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-26 06:00:22

Last updated 2026-08-26 14:43:07

Assigner WPScan

CVSS score 5.3

State PUBLISHED

Description

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer's subscription and billing information.

← Browse all CVEs View on cve.org ↗