Auth bypass in Payment Plugins For Paypal Woocommerce
CVE-2026-80341
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowing any authenticated user, such as a subscriber, to bind another customer's stored card to their own account and then charge or delete it. Exploitation requires the attacker to already know the payment provider's identifier for the victim's stored method, which the Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not expose.
Vulnerability class: Broken Access Control
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N.
Affected products
- Unknown Payment Plugins For Paypal Woocommerce
Weakness classification (CWE)
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)
Frequently asked questions
- What is CVE-2026-80341?
- CVE-2026-80341 is a medium-severity vulnerability in Payment Plugins For Paypal Woocommerce, classified under Incorrect Authorization. CVSS score: 5.9/10. Published 2026-09-09.
- How severe is CVE-2026-80341?
- Medium severity. CVSS v3 base score is 5.9 out of 10.