TI-2019-04282 CVE-2019-5992 · GHSA-frxh-x3vw-f8vmCross-site request forgery in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlierPriority MEDIUM 40Cross-site request forgery (CSRF) vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00853 · Published 2019-09-12 · No fix listed CWE-352