{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://wordpress.org/plugins","product":"GetPaid","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"2.8.65","status":"affected","version":"2.8.63","versionType":"semver"}]}],"cveId":"CVE-2026-123668","cwes":["CWE-1284"],"description":"The GetPaid WordPress plugin from 2.8.63 to 2.8.64 does not ensure item quantities on its payment forms are whole numbers, allowing unauthenticated users to have an invoice for a priced item marked as paid without being charged.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/62c1a6ac-0f9f-4402-b72b-8b10ffe6989c/"}],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: WPScan","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1794382389445,"publishedAt":1794382389445,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/62c1a6ac-0f9f-4402-b72b-8b10ffe6989c/"}],"remediation":[],"revision":"9ed8fb8f5a40a8e84bd9381d7508fce2e41eb1542438e11b70189083df86054e","sources":[{"modifiedAt":1794382389445,"name":"CNA: WPScan","retrievedAt":1794384517573,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123668"}],"ssvc":null,"status":"published","title":"GetPaid 2.8.63 - 2.8.64 - Unauthenticated Payment Bypass via Fractional Item Quantity","updatedAt":1794384517573}