CVE-2026-14236 — Contact Form 7 PayPal & Stripe Add-on Open Redirect

Unauthenticated open redirect in the Contact Form 7 – PayPal & Stripe Add-on (< 2.5) via an unvalidated Stripe return URL.

July 27, 2026 · 3 min