Medium severity5.3NVD Advisory· Published Nov 11, 2026

CVE-2026-123668

Description

The GetPaid WordPress plugin from 2.8.63 to 2.8.64 does not ensure item quantities on its payment forms are whole numbers, allowing unauthenticated users to have an invoice for a priced item marked as paid without being charged.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Getpaidllm-fuzzy
Range: 2.8.63 - 2.8.64
Package: https://wordpress.org/plugins/getpaid

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/62c1a6ac-0f9f-4402-b72b-8b10ffe6989c/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000