https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:43:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89411 <p><strong>Affected:</strong> Unknown Paymattic</p> <p>The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it.</p> <p><strong>Affected:</strong> Unknown Paymattic</p> <p>The Paymattic WordPress plugin from 4.6.20 before 4.6.26 does not verify that a confirmed Stripe payment belongs to the order it is applied to, allowing unauthenticated users to mark an arbitrary pending order as paid by confirming a smaller payment of their own against it.</p> https://vulnerability.circl.lu/vuln/cve-2026-89411