CVE-2026-42655

HIGH7.5JSON export Create alert

Description

Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected products

WPManageNinja / Best Payments Plugin for WPn/a – 4.6.19

References

MISChttps://patchstack.com/database/wordpress/plugin/wp-payment-form/vulnerability/wordpress-best-payments-plugin-for-wp-plugin-4-6-19-payment-bypass-vulnerability?_s_id=cve