A vulnerability in WPForms, a WordPress plugin used in over 6 million websites, could allow subscriber-level users to issue arbitrary Stripe refunds or cancel subscriptions.

Besides contact forms and newsletter sign-ups, you can use WPForms for thousands of other tasks. For example, you can develop feature requests and complaint forms. Some, such as service scorecards and ...

The WPForms plugin for WordPress exposes websites to a vulnerability that allows attackers to update subscriptions and issue refunds. This flaw enables attackers to modify data they normally ...