CVE-2026-42378

MEDIUM6.5JSON export Create alert

Description

Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected products

themeisle / WP Full Stripe Freen/a – 8.4.1

References

MISChttps://patchstack.com/database/wordpress/plugin/wp-full-stripe-free/vulnerability/wordpress-wp-full-stripe-free-plugin-8-4-1-broken-authentication-vulnerability?_s_id=cve