Alipay

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-24390 HIGH POC This Week

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Alipay

NVD WPScan

CVSS 3.1

7.2

EPSS

1.5%

CVE-2014-4514 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS WordPress PHP Alipay

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2021-24390

EPSS 2% CVSS 7.2

HIGH POC This Week

WordPress SQLi Alipay

NVD WPScan

CVE-2014-4514

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS WordPress PHP +1

NVD