Plugin icon

Payment forms, Buy now buttons, and Invoicing System | GetPaid

invoicing

Vulnerabilities:

6

Last Updated:

October 16, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-10-16
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.62 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter
Fixed in
Fixed in 2.8.62
CVSS
7.2 (high)
Published
2026-07-31
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.57 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field
Fixed in
Fixed in 2.8.57
CVSS
6.6 (medium)
Published
2026-07-13
Title
GetPaid < 2.8.55 - Unauthenticated Worldpay Payment Bypass via Insufficient IPN Verification
Fixed in
Fixed in 2.8.55
CVSS
5.9 (medium)
Published
2026-06-08
Title
Payment forms, Buy now buttons, and Invoicing System | GetPaid < 2.8.50 - Unauthenticated Information Exposure
Fixed in
Fixed in 2.8.50
CVSS
5.3 (medium)
Published
2024-08-28
Title
GetPaid < 2.8.12 - Missing Authorization via column_subscription()
Fixed in
Fixed in 2.8.12
CVSS
4.3 (medium)
Published
2021-06-02
Title
GetPaid < 2.3.4 - Authenticated Stored XSS
Fixed in
Fixed in 2.3.4
CVSS
7.4 (high)