CVE-2026-123668

Name of the Vulnerable Software and Affected Versions GetPaid versions 2.8.63 through 2.8.64

Description The GetPaid WordPress plugin fails to verify that item quantities on payment forms are whole numbers. This allows unauthenticated users to bypass payment by using fractional quantities, resulting in invoices for priced items being marked as paid without the required charge.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.