vulnti.work

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticated users to bypass payments

High CVSS 7.5
CVECVE-2026-13399
First seen2026-08-07 16:30 UTC
Disclosed2026-08-06 22:16 UTC
Last updated2026-08-07 16:30 UTC
Channel statusauto

Summary

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticated users to bypass payments

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD