https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:31:28.276354+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351279 EUVD-2026-351279 2026-10-07T16:31:28.309425+00:00 EUVD-2026-351279 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17012 fkie_cve-2026-17012 2026-10-07T16:31:28.309459+00:00

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order by paying the full amount to their own PayPal account instead of the merchant's.

 https://cve.radiocsirt.org/vuln/ghsa-645w-cxcg-9mjc GHSA-645w-cxcg-9mjc 2026-10-07T16:31:28.309493+00:00

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allowing unauthenticated buyers to complete a WooCommerce order by paying the full amount to their own PayPal account instead of the merchant's.