CVE-2026-16990 | Payment Button for PayPal Plugin up to 1.2.3.44 on WordPress client-side enforcement of server-side security

A vulnerability was found in Payment Button for PayPal Plugin up to 1.2.3.44 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in client-side enforcement of server-side security.

This vulnerability was named CVE-2026-16990. The attack may be initiated remotely. There is no available exploit.