Skip to content
Sign in
4.3 Medium

CVE-2026-81423 The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a…

Description

The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing.

Affected products and versions

Product Affected versions Fixed in
Accept Stripe Payments 2.1 earliest → < 2.1.4 2.1.4

Other CVEs of Accept Stripe Payments

The 3 CVEs of Accept Stripe Payments →
CVE-2026-81424 The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is… 5.3 Medium CVE-2022-2194 The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing… Not rated
Track this CVE