Visa Acceptance Solutions <= 2.1.0 - Unauthenticated Authentication Bypass via Billing Email
criticalThe Visa Acceptance Solutions plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.1.0. This is due to the `express_pay_product_page_pay_for_order()` function logging users in based solely on a user-supplied billing email address during guest checkout for subscription prod...
- CVSS:
- 9.8
- Affected:
- up to 2.1.0
- Fix:
- No patched version reported
- Disclosed:
- Apr 14, 2026