CVE-2026-57364

Name of the Vulnerable Software and Affected Versions Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More versions prior to 2.2.1

Description A business logic flaw exists due to improper validation of specified quantities in input. This allows unauthenticated attackers to access functionality not properly constrained by Access Control Lists (ACLs), which are security mechanisms that define which users or systems are granted access to specific objects. Consequently, attackers can alter input quantities.

Recommendations Update to a version newer than 2.2.0.