WordPress plugin
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium11
- Low0
All Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤8.5.6Update to 8.5.7 | CVE-2026-62073 | |
| Medium5.3 | Unauthenticated Insecure Direct Object Reference <8.5.5Update to 8.5.5 | CVE-2026-80311 | |
| Medium5.3 | Unauthenticated Insecure Direct Object Reference <8.5.1Update to 8.5.1 | CVE-2026-77789 | |
| Medium5.3 | Unauthenticated Information Exposure <8.5.1Update to 8.5.1 | CVE-2026-77758 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤8.5.0Update to 8.5.1 | CVE-2026-61960 | |
| Medium5.3 | Missing Authorization ≤8.5.1Update to 8.5.2 | CVE-2026-16734 | |
| Medium5.3 | Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter ≤8.4.3Update to 8.5.0 | CVE-2026-12432 | |
| Medium4.3 | Missing Authorization ≤8.4.1Update to 8.4.2 | CVE-2026-42378 | |
| High7.5 | Unauthenticated SQL Injection ≤8.3.1Update to 8.3.2 | CVE-2025-9322 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤8.2.5Update to 8.2.6 | CVE-2025-58789 | |
| Medium4.3 | Cross-Site Request Forgery ≤7.0.17Update to 7.0.18 | CVE-2023-47667 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤7.0.5Update to 7.0.6 | CVE-2023-46088 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤7.0.5Update to 7.0.6 | CVE-2023-28934 |
- Medium5.3Missing Authorization
≤8.5.6Update to 8.5.7
- Medium5.3Unauthenticated Insecure Direct Object Reference
<8.5.5Update to 8.5.5
- Medium5.3Unauthenticated Insecure Direct Object Reference
<8.5.1Update to 8.5.1
- Medium5.3Unauthenticated Information Exposure
<8.5.1Update to 8.5.1
- High7.2Unauthenticated Stored Cross-Site Scripting
≤8.5.0Update to 8.5.1
- Medium5.3Missing Authorization
≤8.5.1Update to 8.5.2
- Medium5.3Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter
≤8.4.3Update to 8.5.0
- Medium4.3Missing Authorization
≤8.4.1Update to 8.4.2
- High7.5Unauthenticated SQL Injection
≤8.3.1Update to 8.3.2
- Medium4.9Authenticated (Administrator+) SQL Injection
≤8.2.5Update to 8.2.6
- Medium4.3Cross-Site Request Forgery
≤7.0.17Update to 7.0.18
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤7.0.5Update to 7.0.6
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤7.0.5Update to 7.0.6
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions: common questions
Does Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions: 2 high, 11 medium. None are known to affect version null.
How do I check which version of Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions vulnerability?
CVE-2026-62073, published Oct 1, 2026: Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions <= 8.5.6 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions vulnerability listed in CISA KEV?
No. None of the known Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions vulnerabilities is currently listed in the CISA KEV catalog.