Formidable Forms Flaw Lets Attackers Pay Less For Expensive Purchases

A vulnerability in the Formidable Forms WordPress plugin installed on over 300,000 websites enables unauthenticated attackers to bypass payment verification. The vulnerability affects all versions up to and including 6.28. It makes it possible for attackers to reuse a Stripe payment made for a lower amount to mark a more expensive transaction as paid. Formidable

Read the full article

Published by searchenginejournal.com