CVE-2026-127204 is a Insufficient Verification of Data Authenticity vulnerability in the WordPress plugin woocommerce-paypal-pro-payment-gateway (woocommerce-paypal-pro-payment-gateway). Versions before 4.1.1 are affected. Fixed in 4.1.1. CVSS score: 8.7 (High). Published 2026-11-12.
CVE · High
CVE-2026-127204 — Insufficient Verification of Data Authenticity
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-127204 | Insufficient Verification of Data Authenticity | Insufficient Verification of Data Authenticity | High 8.7 | < 4.1.1 | 4.1.1 | 2026-11-12 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.