CVE-2026-11567

None

Open

TLP:CLEAR

SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

The SureForms WordPress plugin before 2.11.1 does not properly validate the payment amount on forms that use a dynamically-sourced (variable/hidden) payment amount, allowing unauthenticated users to underpay for the configured product or subscription. Forms using a fixed configured price are not affected.

Details

EPSS Score ⓘ: 0.18%

8th percentile
Confidence: 90%
Published: Jul 14, 2026
Last Modified: Jul 14, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.