PULSE
LIVE71signals / 24h
ES
FEED
ransomkairos reclama a Hightech Signs · US · Manufacturingransomsilentransomgroup reclama a Riker Danzig LLP · US · Professional Servicesransomincransom reclama a gamaus.com · US · Technologyransomblacknevas reclama a Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C... · US · Agriculture and Food Productionransomblacknevas reclama a Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co... · US · Healthcareransomblacknevas reclama a Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT ... · CA · Professional Servicesransomqilin reclama a United Association Local Union 345 · US · Otherransomincransom reclama a BEDC.COM.AU · AU · Energy & Utilitiesransomincransom reclama a diabetesandmetabolism.com · US · Healthcareransomclop reclama a AOL.COM · US · Technologyransomclop reclama a GATE7LLC.COMGBBEV.COM · GB · Not Foundransomclop reclama a ENTERATEK.MXESBERBEVERAGE.COM · MX · Agriculture and Food Productionransomclop reclama a NUVITIA.COM · FR · Technologyransomclop reclama a IPMSOLUTIONS.SK · SK · Professional Servicesransomkairos reclama a Hightech Signs · US · Manufacturingransomsilentransomgroup reclama a Riker Danzig LLP · US · Professional Servicesransomincransom reclama a gamaus.com · US · Technologyransomblacknevas reclama a Westbrook Greenhouse Systems www.westbrooksystems.com serviced by an IT company Computer C... · US · Agriculture and Food Productionransomblacknevas reclama a Enteroptyx Ophthalmology Products www.enteroptyx.com serviced by an IT company Computer Co... · US · Healthcareransomblacknevas reclama a Jack Rutherford Customs Brokers Ltd / The Rutherford Group www.therg.ca serviced by an IT ... · CA · Professional Servicesransomqilin reclama a United Association Local Union 345 · US · Otherransomincransom reclama a BEDC.COM.AU · AU · Energy & Utilitiesransomincransom reclama a diabetesandmetabolism.com · US · Healthcareransomclop reclama a AOL.COM · US · Technologyransomclop reclama a GATE7LLC.COMGBBEV.COM · GB · Not Foundransomclop reclama a ENTERATEK.MXESBERBEVERAGE.COM · MX · Agriculture and Food Productionransomclop reclama a NUVITIA.COM · FR · Technologyransomclop reclama a IPMSOLUTIONS.SK · SK · Professional Services
← All CVEs
CVE WatchAug 12, 2026

CVE-2026-16990

The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a clie

CVSS

5.3

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 12, 2026 · Last modified: Aug 12, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.

Official references
Related CVEs

No related CVEs by CWE or product.