CVE-2026-17012 in Accept PayPal & Stripe with Subscriptions for WooCommerce Plugin
要約
〜によって MITRE • 2026年08月10日
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order by paying the full amount to their own PayPal account instead of the merchant's.
If you want to get best quality of vulnerability data, you may have to visit VulDB.