CVE-2026-90923 in Autopay Plugininfo

Zusammenfassung

von MITRE • 17.09.2026

The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

WPScan

Reservieren

14.09.2026

Veröffentlichung

17.09.2026

Moderieren

akzeptiert

Eintrag

VDB-406311

CPE

bereit

EPSS

0.00136

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-90923
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-90923
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-90923/

◂ ZurückÜbersichtWeiter ▸

Might our Artificial Intelligence support you?

Check our Alexa App!