Plugin icon

WP Easy Pay – Payment and Donation Form Builder for Square

wp-easy-pay

Vulnerabilities:

10

Last Updated:

July 22, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-07-10
Title
WP Easy Pay < 4.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action
Fixed in
Fixed in 4.5.1
CVSS
4.3 (medium)
Published
2026-06-18
Title
WP Easy Pay – Payment and Donation form Builder for Square <= 4.5.0 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2026-03-16
Title
WP Easy Pay – Payment and Donation form Builder for Square < 4.2.12 - Missing Authorization
Fixed in
Fixed in 4.2.12
CVSS
4.3 (medium)
Published
2024-07-23
Title
WP Easy Pay (Free) < 4.2.4 - Missing Authorization to Unauthenticated Service Disconnection
Fixed in
Fixed in 4.2.4
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.2b1
CVSS
6.1 (medium)
Published
2023-05-01
Title
WP EasyPay < 4.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.1
CVSS
5.8 (medium)
Published
2023-04-14
Title
WP EasyPay < 4.1 - CSRF
Fixed in
Fixed in 4.1
CVSS
4.3 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 4.0.2
CVSS
4.3 (medium)
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Fixed in
Fixed in 3.2.1
CVSS
5.4 (medium)
Published
2021-07-05
Title
WP EasyPay – Square for WordPress < 3.2.3 - Cross-Site Request Forgery
Fixed in
Fixed in 3.2.3
CVSS
4.3 (medium)