Security News > 2024 > December > WPForms bug allows Stripe refunds on millions of WordPress sites

2024-12-10 20:00
A vulnerability in WPForms, a WordPress plugin used in over 6 million websites, could allow subscriber-level users to issue arbitrary Stripe refunds or cancel subscriptions. [...]