CVE-2026-90987 | Easy PayPal & Stripe Buy Now Button Plugin up to 2.0.5 on WordPress external control of assumed-immutable web parameter

October 2, 2026 Yanac

A vulnerability labeled as problematic has been found in Easy PayPal & Stripe Buy Now Button Plugin up to 2.0.5 on WordPress. The affected element is an unknown function. The manipulation results in external control of assumed-immutable web parameter.

This vulnerability was named CVE-2026-90987. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More