CVE-2026-96818

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

Published Sep 30, 2026
CVSS 7.5 high
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

mra13 / Team Tips and Tricks HQ WP Express Checkout

CVE-2026-96818 at the National Vulnerability Database