CVE-2026-66660

The Contact Form 7 – PayPal & Stripe Add-on versions up to 2.5.1 are vulnerable to unauthenticated broken access control, allowing attackers to exploit the add-on without authentication. This could lead to unauthorized access to sensitive data or functionality, potentially compromising user information and payment processes. Organizations using these versions of the add-on should prioritize patching to mitigate the risk of exploitation.