WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
payment-gateways-caller-for-wp-e-commerce
Published
2014-08-01
Title
Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion
Slug
payment-page
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
payment-page
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
payment-page
Published
2026-02-13
Title
Payment Page | Payment Form for Stripe < 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'pricing_plan_select_text_font_family' Parameter
Slug
payment-qr-woo
Published
2025-06-05
Title
Payment QR WooCommerce <= 1.1.6 - Missing Authorization
Slug
payments-stripe-gateway
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
payments-stripe-gateway
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
payments-stripe-gateway
Published
2024-11-08
Title
Pay With Stripe <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
payoneer-checkout
Published
2025-09-05
Title
Payoneer Checkout < 3.5.0 - Missing Authorization
Slug
payos
Published
2025-09-22
Title
payOS <= 1.0.73 - Cross-Site Request Forgery
Slug
paypal-currency-converter-basic-for-woocommerce
Published
2015-06-10
Title
Paypal Currencucy Converter Basic For Woocommerce <= 1.3 - File Read
Slug
paypal-digital-goods-monetization-powered-by-cleeng
Published
2014-08-01
Title
paypal-digital-goods-monetization-powered-by-cleeng <= 2.2.13 - XSS in ZeroClipboard
Slug
paypal-donation-shortcode
Published
2025-11-10
Title
Paypal Donation Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paypal-donations
Published
2022-11-04
Title
Donations via PayPal < 1.9.9 - Admin+ Stored XSS
Slug
paypal-express-checkout
Published
2025-04-24
Title
PayPal Express Checkout <= 2.1.2 - Cross-Site Request Forgery
Slug
paypal-forms
Published
2025-10-02
Title
PayPal Forms <= 1.0.3 - Cross-Site Request Forgery
Slug
paypal-gift-certificate
Published
2024-10-11
Title
Easy PayPal Gift Certificate <= 1.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wpppgc_plugin_options
Slug
paypal-pay-buy-donation-and-cart-buttons-shortcode
Published
2024-05-22
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
paypal-pay-buy-donation-and-cart-buttons-shortcode
Published
2024-05-31
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS
Slug
paypal-pay-buy-donation-and-cart-buttons-shortcode
Published
2024-05-31
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS
Slug
paypal-payment-button-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting
Slug
paypal-payment-button-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - CSRF to Stored XSS in settings page
Slug
paypal-payment-button-by-vcita
Published
2025-01-15
Title
Online Payments < 3.30.0 - Contributor+ Stored XSS
Slug
paypal-payment-button-by-vcita
Published
2025-02-17
Title
Online Payments – Get Paid with PayPal, Square & Stripe < 3.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paypal-payments-shortcode
Published
2025-12-11
Title
Paypal Payment Shortcode <= 1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttom_image' Shortcode Attribute