Medium · 6.5 CVE-2026-93620 EUVD-2026-85463GHSA-9v5p-4w93-45x5

WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack

Vendor: PayPlus Tech Team Product: PayPlus Payment Gateway

Description

Unauthenticated Broken Access Control in PayPlus Payment Gateway <= 8.2.5 versions.

Affected products

Vendor	Product	Affected	Fixed
PayPlus Tech Team	PayPlus Payment Gateway	≤ 8.2.5	—

References

https://patchstack.com/database/wordpress/plugin/payplus-payment-gateway/vulnerability/wordpress-payplus-payment-gateway-plugin-8-2-5-broken-access-control-vulnerability?_s_id=cve vdb-entry