CVE-2026-81423 — Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler

CVE-2026-81423

Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler PUBLISHED

Description (CNA)

The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing.

Affected (CNA)

Vendor / product	Versions
Unknown / Accept Stripe Payments	affected 0 before 2.1.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/0e4bbbde-b93e-4b58-8baf-301073e9a0c5/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.