Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functions in all versions up to, and including, 1.8.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary CSV data and overwrite WooCommerce payment tokens, postmeta, and order meta records.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CVE-2026-3462 The Frisbii Pay plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'upload_csv' and 'process_batch' functio… https://www.cve.org/CVERecord?id=CVE-2026-3462
Post summary
The Frisbii Pay plugin for WordPress (CVE‑2026‑3462) suffers from missing capability checks on certain batch functions, allowing unauthorized data modification.
https://atomicedge.io/cve-proof/cve-2026-3462-reepay-checkout-gateway-version-1-8-9-medium-vulnerability-proof-of-concept CVE-2026-3462 reepay-checkout-gateway (CVSS Score 6.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpse…
Post summary
The tweet links to a proof‑of‑concept for CVE‑2026‑3462, a medium‑severity vulnerability in the Reepay checkout gateway, but offers no details on active exploitation, patches, or exploit code.