CyberRota Analysis
AI-GeneratedThe Accept PayPal & Stripe with Subscriptions for WooCommerce plugin for WordPress versions up to 3.1.0 is vulnerable due to inadequate validation of payment amounts, allowing customers to underpay while still having their orders marked as fully paid. This flaw could lead to significant revenue loss for merchants using the plugin, as it undermines the integrity of transaction processing. WordPress site administrators utilizing this plugin should prioritize applying updates to mitigate this risk.
Original NVD Description
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less than the order total and still have the order marked as fully paid when the PayPal Data Transfer feature is enabled.