← All advisories

Medium severity6.5NVD Advisory· Published Aug 13, 2026· Updated Aug 14, 2026

CVE-2026-66660

CVE-2026-66660

Description

Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Contact Form 7 Paypal Add Onllm-fuzzy
Range: <=2.5.1
Package: https://wordpress.org/plugins/contact-form-7-paypal-add-on

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/contact-form-7-paypal-add-on/vulnerability/wordpress-contact-form-7-paypal-stripe-add-on-plugin-2-5-1-broken-access-control-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 10, 2026 to August 16, 2026)
Wordfence Blog · Aug 21, 2026