plugin

Better Payment Vulnerabilities

2 known security issues reported for the Better Payment WordPress plugin. Most recent disclosed Sep 21, 2026.

2 medium

Running Better Payment on your site? Check whether your installed version is affected.

Scan your site free

Better Payment <= 2.3.3 - Unauthenticated Payment Manipulation

medium

The Better Payment plugin for WordPress is vulnerable to payment manipulation in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to alter payment amounts.

CVSS:
5.3
(Wordfence)
Affected:
up to 2.3.3
Fixed in:
2.3.4
Disclosed:
Sep 21, 2026

CVE-2026-77765 on NVD →

Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More <= 2.2.0 - Unauthenticated Business Logic Flaw

medium

The Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin for WordPress is vulnerable to a business logic flaw in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to alter input quantities.

CVSS:
5.3
(Wordfence)
Affected:
up to 2.2.0
Fixed in:
2.2.1
Disclosed:
Jul 7, 2026

CVE-2026-57364 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database