7.5
High
CVE-2026-96818 Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions
Description
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Express Checkout (Accept PayPal Payments) 2.4 | earliest → 2.4.9 | No fix stated |