Security News > 2024 > December > WPForms bug allows Stripe refunds on millions of WordPress sites

WPForms bug allows Stripe refunds on millions of WordPress sites
2024-12-10 20:00

A vulnerability in WPForms, a WordPress plugin used in over 6 million websites, could allow subscriber-level users to issue arbitrary Stripe refunds or cancel subscriptions. [...]


News URL

https://www.bleepingcomputer.com/news/security/wpforms-bug-allows-stripe-refunds-on-millions-of-wordpress-sites/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Wordpress 7 2 93 44 18 157
Stripe 5 0 2 4 1 7