Vendor
An improper input validation vulnerability in the GetPaid WordPress plugin before 2.8.63 allows unauthenticated attackers to bypass payment requirements by submitting negative quantity values on public payment forms.