Plugin icon

Quick PayPal Payments: Payment Button & Form

quick-paypal-payments

Vulnerabilities:

12

Last Updated:

October 14, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
Quick PayPal Payments: Payment Button & Form < 6.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form' Shortcode Attribute
Fixed in
Fixed in 6.0.5
CVSS
5.5 (medium)
Published
2026-10-13
Title
Quick PayPal Payments: Payment Button & Form < 6.0.4 - Missing Authorization
Fixed in
Fixed in 6.0.4
CVSS
5.3 (medium)
Published
2026-08-05
Title
Quick PayPal Payments < 5.7.51 - Unauthenticated Payment Bypass via PayPal IPN
Fixed in
Fixed in 5.7.51
CVSS
5.3 (medium)
Published
2025-09-04
Title
Quick Paypal Payments < 5.7.47 - Cross-Site Request Forgery
Fixed in
Fixed in 5.7.47
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.7.28
CVSS
6.1 (medium)
Published
2023-04-04
Title
Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS
Fixed in
Fixed in 5.7.26.4
CVSS
3.5 (low)
Published
2023-02-15
Title
Quick Paypal Payments < 5.7.26 - Contributor+ Stored XSS
Fixed in
Fixed in 5.7.26
CVSS
6.8 (medium)
Published
2023-02-14
Title
Quick Paypal Payments < 5.7.26 - Unauthenticated Stored XSS
Fixed in
Fixed in 5.7.26
CVSS
8.8 (high)
Published
2023-02-14
Title
Quick Paypal Payments < 5.7.26 - Unauthenticated Payment Message Deletion/Update
Fixed in
Fixed in 5.7.26
CVSS
5.4 (medium)
Published
2023-02-10
Title
Quick Paypal Payments < 5.7.26 - Admin+ Stored XSS
Fixed in
Fixed in 5.7.26
CVSS
3.5 (low)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 5.7.22
CVSS
4.3 (medium)
Published
2014-08-01
Title
Quick Paypal Payments 3.0 - Payment Sending Multiple Parameter XSS
Fixed in
Fixed in 3.1
CVSS
n/a