CVE-2026-81423
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 05, 2026
Vendor
unknown
Description
The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing.