Unknown Accept Stripe Payments vulnerabilities

2 CVEs affecting Unknown Accept Stripe Payments, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81424, published 2026-09-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-81424, published 2026-09-05. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for,…
CVE-2026-81423, published 2026-09-05. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary…