Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-83533 The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually…

Description

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Express Checkout 2.4 premières → < 2.4.9 2.4.9

Autres CVE de WP Express Checkout

Les 2 CVE de WP Express Checkout →
CVE-2026-83537 The WP Express Checkout WordPress plugin before 2.5.0 does not verify server-side that a payment was actually… 5.3 Moyenne
Suivre cette CVE