CVE-2025-14487

Name of the Vulnerable Software and Affected Versions Handily plugin for WordPress versions prior to 1.0.4

Description Missing authorization checks allow unauthenticated attackers to modify Stripe payment configuration settings. By manipulating payment settings parameters, an attacker can change publishable keys, secret keys, email addresses, success URLs, and cancel URLs, potentially redirecting payments to their own Stripe accounts.

Recommendations Update the Handily plugin for WordPress to version 1.0.4 or later.