PT-2026-81968

CVE-2026-77758

Published

2026-08-26

Updated

2026-08-26

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Stripe Payment Forms by WP Full Pay versions prior to 8.5.1

Description An issue exists where the plugin fails to properly verify if a customer portal session has completed its confirmation step before returning data. This allows unauthenticated users to access and read the subscription and billing information of other customers.

Recommendations Update Stripe Payment Forms by WP Full Pay to version 8.5.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vaibhav Narkhede

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers