CVE-2026-62073

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-01

Last updated on: 2026-10-03

Assigner: Patchstack

Description

Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-01

Last Modified

2026-10-03

Generated

2026-10-19

AI Q&A

2026-10-01

EPSS Evaluated

2026-10-18

NVD

CVE-2026-62073

EUVD

EUVD-2026-90853

Affected Vendors & Products

Vendor	Product	Version / Range
Themeisle	WP	Full Stripe Free n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2026-62073 is an Unauthenticated Broken Access Control vulnerability in the WordPress WP Full Stripe Free plugin versions 8.5.6 and earlier. It allows unauthenticated users to access restricted pages or perform unauthorized actions without proper authentication.

Detection Guidance

To detect this vulnerability, check if your WordPress site is running WP Full Stripe Free plugin version 8.5.6 or earlier. Log in to your WordPress dashboard, go to Plugins, and verify the installed version. Alternatively, use commands like 'wp plugin list' in WP-CLI or inspect the plugin files in the /wp-content/plugins/wp-full-stripe-free/ directory for version details.

Impact Analysis

This vulnerability may allow attackers to view sensitive data of other users, access restricted pages, or perform unauthorized actions. The CVSS score of 7.5 indicates a high impact on confidentiality and integrity of the system.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive user data, potentially violating GDPR and HIPAA compliance requirements related to data protection and access controls.

Mitigation Strategies

Immediately update the WP Full Stripe Free plugin to version 8.5.7 or later. If updating is not possible, seek assistance from a hosting provider or web developer to apply necessary fixes. Enable auto-updates for the plugin to prevent future vulnerabilities.

Hi! I’m here to help you understand CVE-2026-62073. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70