Read the docs

WP Easy Pay

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WP Easy Pay records in CISA KEV

No WP Easy Pay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Easypay 4 records MEDIUM

Records

4 records in Wp Easypay · all components

TI-2023-01384 CVE-2023-1465 · GHSA-33wm-84cp-c2cq

WP EasyPay < 4.1 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-08-16 Fixed in 4.1
TI-2024-05435 CVE-2024-5861 · GHSA-j39v-xvqw-5q63

WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection

Priority LOW 35

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpep_square_disconnect() function in all versions up to, and including…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00398 Published 2024-07-24 No fix listed CWE-862
Open these records in search →