Plugin icon

Easy PayPal & Stripe Buy Now Button

wp-ecommerce-paypal

Vulnerabilities:

8

Last Updated:

September 23, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-28
Title
Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price
Fixed in
Fixed in 2.0.6
CVSS
5.3 (medium)
Published
2026-07-28
Title
Easy PayPal & Stripe Buy Now Button < 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.5
CVSS
7.2 (high)
Published
2025-05-07
Title
Easy PayPal Buy Now Button < 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.1
CVSS
4.4 (medium)
Published
2024-08-09
Title
Easy PayPal Buy Now Button < 1.9.1 - Unauthenticated Open Redirect
Fixed in
Fixed in 1.9.1
CVSS
7.2 (high)
Published
2024-02-27
Title
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update
Fixed in
Fixed in 1.9
CVSS
4.3 (medium)
Published
2023-12-27
Title
Easy PayPal Buy Now Button < 1.8.2 - Cross-Site Request Forgery
Fixed in
Fixed in 1.8.2
CVSS
4.3 (medium)
Published
2023-01-19
Title
Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode
Fixed in
Fixed in 1.7.4
CVSS
6.8 (medium)
Published
2021-10-04
Title
Easy PayPal Buy Now Button < 1.7.3 - CSRF to Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.3
CVSS
8.8 (high)