WordPress Plugin Vulnerabilities

WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment

Description

The plugin does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying.

Proof of Concept

Affects Plugins

Plugin icon
wp-express-checkout
Fixed in 2.5.0

References

CVE
CVE-2026-83537

Miscellaneous

Original Researcher
ryan zegar
Submitter
ryan zegar
Verified
Yes
WPVDB ID
02b39e4f-181d-4573-9175-bf5a6d71e531

Timeline

Publicly Published
2026-09-07 (about 2 days ago)
Added
2026-09-07 (about 1 day ago)
Last Updated
2026-09-07 (about 1 day ago)

Other

Published
Title
Published
2022-05-03
Title
Helpful < 4.5.15 - Votes Tampering
Published
2026-07-06
Title
Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order
Published
2018-08-26
Title
Ajax BootModal Login <= 1.4.3 - Captcha Reuse
Published
2019-05-06
Title
W3 Total Cache < 0.9.7.4 - Cryptographic Signature Bypass
Published
2026-09-02
Title
E-cab Taxi Booking Manager for Woocommerce < 2.0.5 - Unauthenticated Price Manipulation via mptbm_add_to_cart