CVE-2026-17016
CVE-2026-17016
The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less tha…
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)