NetSight
high7.5

CVE-2026-13399

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticate…

Impact

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint, allowing unauthenticated users to bypass payments

Affected products

ProductAffected versions
Payment Plugins For PayPal WooCommerce WordPress Plugin
before 2.0.20

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References