https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T11:30:17.958385+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-77789 fkie_cve-2026-77789 2026-10-06T11:30:17.962369+00:00

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before acting on it, allowing a user with a confirmed portal session to cancel, reactivate or modify subscriptions belonging to other customers.

 https://vulnerability.circl.lu/vuln/ghsa-wq46-399w-9f66 GHSA-wq46-399w-9f66 2026-10-06T11:30:17.962477+00:00

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not verify that a subscription belongs to the customer bound to the requesting customer-portal session before acting on it, allowing a user with a confirmed portal session to cancel, reactivate or modify subscriptions belonging to other customers.