TLDR InfoSec · ATTACKS & VULNERABILITIES
WPFORMS BUG ALLOWS STRIPE REFUNDS ON MILLIONS OF WORDPRESS SITES
Summary from the TLDR InfoSec newsletter
A bug in WPForms allows users to issue Stripe refunds on over 6 million WordPress sites. The vulnerability was categorized as high-severity and a patch has been released in version 1.9.2.2. Website owners are advised to update to the latest version to prevent potential revenue loss and business disruption.