OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-62073

HIGH · CVSS 7.5 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

The WP Full Stripe Free plugin versions up to 8.5.6 are vulnerable to unauthenticated broken access control, allowing attackers to exploit this weakness to gain unauthorized access to sensitive functionalities. This could lead to unauthorized actions being performed on behalf of legitimate users, potentially compromising user data and application integrity. Organizations using this plugin should prioritize immediate updates or mitigations to safeguard against potential exploitation.

CVE
CVE-2026-62073
Severity
HIGH
CVSS
7.5
EPSS
0.25%

Original NVD Description

Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.