PatchSiren

Fullworks Plugins CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Fullworks Plugins CVE published 2026-10-13

CVE-2026-108492

The CVE-2026-108492 vulnerability affects the WordPress Quick Paypal Payments plugin, versions up to and including 6.0.3. This issue is related to a Missing Authorization vulnerability, which allows attackers to exploit incorrectly configured access control security levels. The vulnerability has a CVSS score of 5.3 and a severity rating of MEDIUM. Defenders should assess their exposure, verify the plugin [truncated]