Medium severity5.3NVD Advisory· Published Aug 26, 2026· Updated Aug 26, 2026

CVE-2026-77758

Description

The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer's subscription and billing information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Stripe Payment Forms by WP Full Payllm-fuzzy
Range: <8.5.1

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/2d4fc012-9f80-43cc-b68d-96842700fe2f/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000