CVE-2026-90987

Name of the Vulnerable Software and Affected Versions Easy PayPal & Stripe Buy Now Button WordPress plugin versions prior to 2.0.6

Description The plugin fails to verify the payment amount on the server side, instead relying on a value provided by the client. This allows an unauthenticated attacker to manipulate the price of a purchase by setting an arbitrary lower value.

Recommendations Update the plugin to version 2.0.6 or later.