WordPress Plugin Vulnerabilities

Payment Button for PayPal <= 1.2.3.44 - Unauthenticated Payment Price Manipulation

Description

The plugin does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.

Proof of Concept

Affects Plugins

Plugin icon
wp-paypal
No known fix

References

CVE
CVE-2026-16990

Miscellaneous

Submitter
Muni Nitish Kumar Yaddala
Verified
Yes
WPVDB ID
97c08603-c407-43b2-ab2c-e39f85e89ebe

Timeline

Publicly Published
2026-08-05 (about 28 days ago)
Added
2026-07-29 (about 1 month ago)
Last Updated
2026-08-25 (about 8 days ago)

Other

Published
Title
Published
2023-05-24
Title
Upload Resume <= 1.2.0 - Captcha Bypass
Published
2017-05-16
Title
WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
Published
2026-07-13
Title
WP Travel Engine < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification
Published
2019-06-21
Title
Seo By Rank Math <= 1.0.27 - Authenticated Settings Reset
Published
2024-01-31
Title
BookIt <= 2.4.0 - Price Bypass