CVE-2026-66660 — WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability

CVE-2026-66660

WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.

Vendor / product	Versions
Scott Paterson / Contact Form 7 – PayPal & Stripe Add-on	affected n/a through 2.5.1

CWE-862

CISA-ADP

No English description supplied.

No references supplied.