Medium · 6.5 CVE-2026-56024 EUVD-2026-37903GHSA-2g6j-493r-hmfj

WordPress WP EasyPay plugin <= 4.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Jun 18, 2026 · Updated Jul 1, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery.

This issue affects WP EasyPay: from n/a through 4.5.0.

Vendor	Product	Affected	Fixed
Saad Iqbal	WP EasyPay	≤ 4.5.0	—