Cross-Site Request Forgery Vulnerability in WP EasyPay by Saad Iqbal
CVE-2026-56024

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
WP Easypay
Vendor
CVE Published:
18 June 2026

What is CVE-2026-56024?

A CSRF vulnerability exists in the WP EasyPay plugin by Saad Iqbal, allowing unauthorized actions to be performed on behalf of authenticated users. This security flaw affects versions up to 4.4.0 and can potentially compromise user accounts and financial transactions, requiring immediate attention and remediation to safeguard against unauthorized access.

Affected Version(s)

WP EasyPay <= 4.4.0

References

https://patchstack.com/database/wordpress/plugin/wp-easy-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sajjad Haqi | Patchstack Bug Bounty Program
.