Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More <= 2.2.0 - Unauthenticated Business Logic Flaw
mediumThe Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin for WordPress is vulnerable to a business logic flaw in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to alter input quantities.
- CVSS:
- 5.3
- Affected:
- up to 2.2.0
- Fixed in:
- 2.2.1
- Disclosed:
- Jul 7, 2026