CyberRota Analysis
AI-GeneratedThe Accept PayPal & Stripe with Subscriptions for WooCommerce plugin for WordPress is vulnerable as it fails to verify that payments are directed to the merchant's configured PayPal account, allowing unauthorized buyers to complete transactions by redirecting payments to their own accounts. This flaw can lead to financial losses for merchants and undermine the integrity of the payment process. WordPress site administrators using this plugin should prioritize addressing this vulnerability to protect against potential fraud and revenue loss.
Original NVD Description
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order by paying the full amount to their own PayPal account instead of the merchant's.