WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
paypal-gift-certificate
Published
2024-10-11
Title
Easy PayPal Gift Certificate <= 1.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wpppgc_plugin_options
Slug
paypal-pay-buy-donation-and-cart-buttons-shortcode
Published
2024-05-22
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
paypal-pay-buy-donation-and-cart-buttons-shortcode
Published
2024-05-31
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS
Slug
paypal-pay-buy-donation-and-cart-buttons-shortcode
Published
2024-05-31
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS
Slug
paypal-payment-button-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - Contributor+ Stored Cross-Site Scripting
Slug
paypal-payment-button-by-vcita
Published
2023-06-02
Title
Multiple plugins by vcita - CSRF to Stored XSS in settings page
Slug
paypal-payment-button-by-vcita
Published
2025-01-15
Title
Online Payments < 3.30.0 - Contributor+ Stored XSS
Slug
paypal-payment-button-by-vcita
Published
2025-02-17
Title
Online Payments – Get Paid with PayPal, Square & Stripe < 3.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paypal-payments-shortcode
Published
2025-12-11
Title
Paypal Payment Shortcode <= 1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttom_image' Shortcode Attribute
Slug
paypal-promotions-and-insights
Published
2025-01-16
Title
PayPal Marketing Solutions <= 1.2 - Missing Authorization
Slug
paypal-responder
Published
2024-11-28
Title
PayPal Responder <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
paypal-shortcodes
Published
2026-03-20
Title
Paypal Shortcodes <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'amount' and 'name' Shortcode Attributes
Slug
payplus-payment-gateway
Published
2024-06-28
Title
PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi
Slug
payplus-payment-gateway
Published
2024-07-01
Title
PayPlus Payment Gateway < 6.6.9 - Reflected Cross-Site Scripting
Slug
payplus-payment-gateway
Published
2024-07-09
Title
PayPlus Payment Gateway < 7.0.8 - Authenticated (Subscriber+) SQL Injection
Slug
paytiko
Published
2025-07-03
Title
Paytiko for WooCommerce <= 1.4.6 - Missing Authorization
Slug
paytium
Published
2020-05-12
Title
Paytium < 3.1.2 - Stored Cross-Site Scripting (XSS)
Slug
paytium
Published
2022-11-30
Title
Paytium < 4.3.7 - Admin+ Stored XSS
Slug
paytium
Published
2024-02-12
Title
Paytium: Mollie payment forms & donations < 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
paytium
Published
2024-11-01
Title
Paytium < 4.4.11 - Missing Authorization
Slug
paytium
Published
2025-01-24
Title
Paytium < 4.4.12 - Unauthenticated Full Path Disclosure
Slug
paytm-donation
Published
2023-04-14
Title
Paytm Payment Donation < 2.2.1 - Reflected XSS
Slug
paytm-donation
Published
2025-02-03
Title
Paytm Payment Donation <= 2.3.3 - Admin+ Stored XSS
Slug
paytm-donation
Published
2025-01-05
Title
Paytm Payment Donation < 2.3.2 - Reflected Cross-Site Scripting
Slug
paytm-payments
Published
2023-02-22
Title
Paytm Payment Gateway < 2.7.7 - Editor+ SQLi