Skip to main content

Online Payments Get Paid With Paypal Square Stripe

3 CVEs product

Monthly

CVE-2024-11895 Feb 18, 08:15 MEDIUM PATCH This Month

The Online Payments - Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.20.0. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Online Payments Get Paid With Paypal Square Stripe Wordpress Plugin Vcita
NVD
CVSS 3.1
6.4
EPSS
0.2%
CVE-2023-2407 Jun 03, 05:15 MEDIUM POC This Month

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments - Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Cross-Site. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Online Payments Get Paid With Paypal Square Stripe Event Registration Calendar By Vcita Wordpress Plugin +1
NVD VulDB
CVSS 3.1
6.1
EPSS
0.1%
CVE-2023-2406 Jun 03, 05:15 MEDIUM POC This Month

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments - Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Online Payments Get Paid With Paypal Square Stripe Event Registration Calendar By Vcita Wordpress Plugin +1
NVD VulDB
CVSS 3.1
6.4
EPSS
0.1%
EPSS 0% CVSS 6.4
MEDIUM PATCH This Month

The Online Payments - Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.20.0. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Online Payments Get Paid With Paypal Square Stripe +2
NVD
EPSS 0% CVSS 6.1
MEDIUM POC This Month

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments - Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Cross-Site. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Online Payments Get Paid With Paypal Square Stripe +3
NVD VulDB
EPSS 0% CVSS 6.4
MEDIUM POC This Month

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments - Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Online Payments Get Paid With Paypal Square Stripe +3
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy