Plugin icon

WP Express Checkout (Fast Payments via PayPal & Stripe)

wp-express-checkout

Vulnerabilities:

4

Last Updated:

September 11, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-09-07
Title
WP Express Checkout < 2.5.0 - Unauthenticated Payment Bypass via wpec_process_empty_payment
Fixed in
Fixed in 2.5.0
CVSS
5.3 (medium)
Published
2026-09-01
Title
WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment
Fixed in
Fixed in 2.4.9
CVSS
5.3 (medium)
Published
2024-03-29
Title
WP Express Checkout (Accept PayPal Payments) < 2.3.8 - Unauthenticated Price Manipulation
Fixed in
Fixed in 2.3.8
CVSS
5.3 (medium)
Published
2023-03-17
Title
WP Express Checkout < 2.2.9 - Admin+ Stored XSS
Fixed in
Fixed in 2.2.9
CVSS
3.5 (low)