Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions vulnerabilities

Product

Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions

by themeisle · last CVE Jun 27, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 1Medium 1Low 0

Severity

All severities2 Critical0 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-9322	7.5	0%	Oct 25	Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL Injection Affected: through 8.3.1
CVE-2026-12432	5.3	1%	Jun 27	Stripe Payment Forms by WP Full Pay <= 8.4.3 - Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter Affected: through 8.4.3