TLDR InfoSec · ATTACKS & VULNERABILITIES

WPFORMS BUG ALLOWS STRIPE REFUNDS ON MILLIONS OF WORDPRESS SITES

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

A bug in WPForms allows users to issue Stripe refunds on over 6 million WordPress sites. The vulnerability was categorized as high-severity and a patch has been released in version 1.9.2.2. Website owners are advised to update to the latest version to prevent potential revenue loss and business disruption.