Wpplugin
17 CVEs across 8 Wpplugin products. Browse Wpplugin vulnerabilities, severities, and proof-of-concept exploits.
Wpplugin products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-47623 | Medium | 5.9 | 2025-05-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-pa… |
CVE-2025-47517 | High | 7.1 | 2025-05-07 | Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affec… |
CVE-2024-10685 | Medium | 6.1 | 2024-11-12 | The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to… |
CVE-2024-10683 | Medium | 6.1 | 2024-11-09 | The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query… |
CVE-2024-9593 | High | 8.3 | 2024-10-18 | The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 (for Time Clock)… |
CVE-2024-8476 | Medium | 4.3 | 2024-09-25 | The Easy PayPal Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or… |
CVE-2024-29130 | High | 7.1 | 2024-03-19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on al… |
CVE-2023-51683 | Medium | 5.4 | 2024-02-28 | Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Easy PayPal & Stripe Buy Now Button.This issue affects Easy PayPal & Stripe Buy Now Button: f… |
CVE-2024-1719 | Medium | 4.3 | 2024-02-28 | The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Con… |
CVE-2023-47239 | Medium | 6.5 | 2023-11-16 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin <= 1.1.10 versions. |
CVE-2023-24405 | Medium | 5.4 | 2023-07-10 | Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on plugin <= 1.9.3 versions. |
CVE-2023-24395 | Medium | 5.4 | 2023-07-10 | Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Contact Form 7 Redirect & Thank You Page plugin <= 1.0.3 versions. |
CVE-2022-4628 | Medium | 5.4 | 2023-02-13 | The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attributes before outputting them back in a pag… |
CVE-2021-24989 | Medium | 6.5 | 2022-01-24 | The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the… |
CVE-2021-24815 | Medium | 4.8 | 2021-11-17 | The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privileg… |
CVE-2021-24572 | Medium | 4.3 | 2021-11-01 | The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletio… |
CVE-2021-24570 | Medium | 4.3 | 2021-11-01 | The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create… |