CVE Catalog
CVE-2026-66660
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.33%
26th percentile - higher than 26% of all known CVEs
Summary
Unauthenticated Broken Access Control vulnerability in Contact Form 7 – PayPal & Stripe Add-on plugin versions up to and including 2.5.1.
Risk Assessment
An unauthenticated attacker may gain unauthorized access to functionality, potentially leading to data breaches or unauthorized changes.
Recommendation
Update the Contact Form 7 – PayPal & Stripe Add-on plugin to a version newer than 2.5.1.
Other vulnerabilities in Contact Form 7 – PayPal & Stripe Add-on
Original NVD description (English source)
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS