WordPress Plugin Flaw Lets Attackers Pay Less for Expensive Purchases
Uncovering a critical flaw in a widely used WordPress plugin According to Search Engine Journal, a severe vulnerability in the Formidable Forms plugin has exposed over 300,000 websites to financial fraud. The flaw, designated CVE-2026-2890 and rated High severity with a CVSS score of 7.5/10, enables unauthenticated attackers to bypass payment verification systems. This means … Read more