WPFormify – Stripe Payments With Form and Checkout (<= 1.1.1)

An unauthenticated vulnerability in the WPFormify plugin allows attackers to overwrite or delete Stripe API credentials via missing capability checks on admin-post.php.