Improper Input Validation in Better Payment Plugin by WPDeveloper
CVE-2026-57364

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Better Payment – Instant Payments, Donations, Fundraising With Subscriptions & More
Vendor
CVE Published:
13 July 2026

What is CVE-2026-57364?

The Better Payment plugin by WPDeveloper suffers from an improper input validation vulnerability that allows attackers to access functionality not properly constrained by access control lists (ACLs). This issue can potentially lead to unauthorized actions within the plugin, affecting versions up to 2.2.0. Ensuring users update to the latest secure version is crucial to safeguarding their systems against this type of threat.

Affected Version(s)

Better Payment – Instant Payments, Donations, Fundraising with Subscriptions &amp; More 0 <= 2.2.0

References

https://patchstack.com/database/Wordpress/Plugin/better-p...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

dodoh4t | Patchstack Bug Bounty Program
.