Veille CVE

Recherche « Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce »

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce » ✕
  1. CVE-2026-17016 3.7 Faible

    Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce

    The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less than the order total and still have the order marked as fully paid when the PayPal Data Transfer feature is enabled.

  2. CVE-2026-17012 5.3 Moyenne

    Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce

    The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order by paying the full amount to their own PayPal account instead of the merchant's.