Medium severity5.3NVD Advisory· Published Aug 26, 2026· Updated Aug 26, 2026
CVE-2026-77758
CVE-2026-77758
Description
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer's subscription and billing information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <8.5.1
Patches
Vulnerability mechanics
References
1News mentions
2- Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)Wordfence Blog · Sep 3, 2026
- WordPress: 25 Plugins and Themes Hit by Vulnerabilities, Including Critical RCE and File Upload FlawsVypr Intelligence · Aug 26, 2026