Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:21:58 +0000 CVE-2026-77758 — Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure… https://db.gcve.eu/vuln/cve-2026-77758 <p><strong>Affected:</strong> Unknown Stripe Payment Forms by WP Full Pay</p> <p>The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer&#39;s subscription and billing information.</p> <p><strong>Affected:</strong> Unknown Stripe Payment Forms by WP Full Pay</p> <p>The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.1 does not properly verify that a customer portal session has completed its confirmation step before returning data, allowing unauthenticated users to read another customer&#39;s subscription and billing information.</p> https://db.gcve.eu/vuln/cve-2026-77758