CVE-2026-90923 | Autopay Plugin up to 5.0.0 on WordPress Payment Call authorization

September 17, 2026 Yanac

A vulnerability, which was classified as critical, was found in Autopay Plugin up to 5.0.0 on WordPress. This vulnerability affects unknown code of the component Payment Call Handler. Such manipulation leads to incorrect authorization.

This vulnerability is referenced as CVE-2026-90923. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More