CVE-2026-77765

UNKNOWN 0.0

Better Payment < 2.3.4 - Unauthenticated Payment Amount Manipulation

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the gateway charge, allowing unauthenticated users to pay an arbitrary reduced amount for a fixed-price item.

Vendor	unknown
Product	better payment
Published	Sep 23, 2026

Stay Ahead of the Next One

Get instant alerts for unknown better payment

Be the first to know when new unknown vulnerabilities affecting unknown better payment are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Better Payment

0 < 2.3.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/932f8c74-1ded-40ee-b1fd-a328f3626f21/

Credits

Muni Nitish Kumar Yaddala WPScan