Notes, deep-dives, and things I’ve been poking at. More coming soon.
CVE-2026-14236 — Contact Form 7 PayPal & Stripe Add-on Open Redirect
Unauthenticated open redirect in the Contact Form 7 – PayPal & Stripe Add-on (< 2.5) via an unvalidated Stripe return URL.