CVE-2026-62073— WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Quick assessment
Affected
Themeisle WP Full Stripe Free
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WP Full Stripe Free 插件在 8.5.6 及更早版本中存在未经身份验证的访问控制失效漏洞。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-62073
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Themeisle | WP Full Stripe Free | n/a ~ 8.5.6 | - |
|
II. Public POCs for CVE-2026-62073
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-62073
请登录查看更多情报信息。
Other References for CVE-2026-62073 (1)
IV. Related Vulnerabilities
Same product: WP Full Stripe Free
-
CVE-2026-61960
WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site S -
CVE-2026-42378
WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authe -
CVE-2025-58789
WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injectio -
CVE-2023-47667
WordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site -
CVE-2023-46088
WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable
Same vendor: Themeisle
-
CVE-2026-97302
WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vuln -
CVE-2026-85198
MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path -
CVE-2026-4945
Otter Blocks <= 3.1.7 - Missing Authorization to Unauthentic -
CVE-2026-61960
WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site S -
CVE-2026-66437
WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forge
Same weakness: CWE-862
-
CVE-2026-17053
SMBus callback-removal syscalls accept an unvalidated user p -
CVE-2026-97280
WordPress Review Schema plugin 3.1.0 - Broken Access Control -
CVE-2026-97297
WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Cont -
CVE-2026-97281
WordPress WP Project Manager plugin <= 4.0.7 - Broken Access -
CVE-2026-97277
WordPress Social Boost plugin <= 3.6.2 - Broken Access Contr
V. Comments for CVE-2026-62073
No comments yet