CVE-2026-13399

The Payment Plugins for PayPal WooCommerce WordPress plugin prior to version 2.0.20 is vulnerable due to inadequate authorization checks on a REST endpoint, enabling unauthenticated users to bypass payment processes. This flaw poses a high risk, as it can lead to unauthorized transactions and financial loss. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential exploitation.