CVE-2026-62073

Summary

The WP Full Stripe Free plugin has a broken access control vulnerability that allows unauthenticated users to perform actions they shouldn't be able to, potentially leading to unauthorized data modifications or system compromise.

Exploitability

Exploitation is straightforward with no prerequisites as the vulnerability affects unauthenticated users, requiring only access to the vulnerable plugin's endpoints.

Blast radius

The impact could be significant as attackers could modify payment-related data or potentially gain unauthorized access to sensitive information through the compromised plugin functionality.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WP Full Stripe Free version 8.5.7 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.