WordPress Plugin Vulnerabilities

Better Payment < 2.2.1 - Unauthenticated Business Logic Flaw

Description

The plugin is vulnerable to a business logic flaw, making it possible for unauthenticated attackers to alter input quantities.

Affects Plugins

Plugin icon
better-payment
Fixed in 2.2.1

References

CVE
CVE-2026-57364
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/8bdcc0ec-79ce-4108-b60a-5930266bbf48

Miscellaneous

Original Researcher
dodoh4t
Verified
No
WPVDB ID
5e676c5f-17d2-44d7-a902-f7ff513b81b4

Timeline

Publicly Published
2026-07-07 (about 3 months ago)
Added
2026-07-17 (about 3 months ago)
Last Updated
2026-07-17 (about 3 months ago)

Other

Published
Title
Published
2016-04-25
Title
iThemes Security <= 5.3.5 - Lack of Capability Check
Published
2016-01-28
Title
Sola Support Ticket <= 3.12 - XSS & Configuration Change
Published
2026-10-09
Title
MicroPayments < 3.2.10 - Subscriber+ Payment Bypass
Published
2015-03-03
Title
Captcha <= 4.0.6 - Captcha Bypass
Published
2026-07-13
Title
Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass