medium5.3
CVE-2026-77765
The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price befor…
Impact
The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the gateway charge, allowing unauthenticated users to pay an arbitrary reduced amount for a fixed-price item.
Affected products
| Product | Affected versions |
|---|---|
| Better Payment WordPress Plugin | before 2.3.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.