WordPress Plugin Vulnerabilities

WP Easy Pay < 4.5.4 - Unauthenticated Payment Bypass

Description

The plugin is vulnerable to a payment bypass. This makes it possible for unauthenticated attackers to bypass payments.

Affects Plugins

Plugin icon
wp-easy-pay
Fixed in 4.5.4

References

CVE
CVE-2026-84762
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/8169c3b8-dc45-4031-a118-378ec5c7d673

Miscellaneous

Original Researcher
Asim Alshaya
Verified
No
WPVDB ID
27c2c5aa-a22e-4e2c-a3b7-37cfec7a06c9

Timeline

Publicly Published
2026-09-02 (about 1 month ago)
Added
2026-09-09 (about 1 month ago)
Last Updated
2026-09-09 (about 1 month ago)

Other

Published
Title
Published
2014-11-04
Title
WP DB Backup < 2.3.0 - Backup Filename Brute Forcing
Published
2017-07-25
Title
Stop User Enumeration <= 1.3.8 - REST API Bypass
Published
2026-10-23
Title
Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback
Published
2022-05-03
Title
Helpful < 4.5.15 - Votes Tampering
Published
2021-08-19
Title
WP Cerber Security < 8.9.3 - Rest-API Protection Bypass