https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:41:31.234742+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351281 EUVD-2026-351281 2026-10-07T13:41:31.237408+00:00 EUVD-2026-351281 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17016 fkie_cve-2026-17016 2026-10-07T13:41:31.237442+00:00

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less than the order total and still have the order marked as fully paid when the PayPal Data Transfer feature is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-3gq9-83xc-rrc7 GHSA-3gq9-83xc-rrc7 2026-10-07T13:41:31.237474+00:00

The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less than the order total and still have the order marked as fully paid when the PayPal Data Transfer feature is enabled.