Read the docs

Scott Paterson

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Scott Paterson records in CISA KEV

No Scott Paterson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Accept Donations With Paypal 5 records LOW Paypal & Stripe Add-on 4 records LOW Contact Form 7 Redirect & Thank You Page 2 records LOW Easy Paypal & Stripe Buy Now Button 2 records LOW Easy Paypal Buy Now Button 1 record MEDIUM Easy Paypal Events 1 record LOW Easy Paypal Shopping Cart 1 record LOW Scottcart 1 record HIGH

Records

4 records in Paypal & Stripe Add-on · all components

TI-2024-19304 CVE-2024-29130 · GHSA-34c4-jgq5-j63f

WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-19 No fix listed CWE-79
TI-2024-09901 CVE-2024-10683 · GHSA-vg3h-mrrx-x458

Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting

Priority LOW 27

The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00401 Published 2024-11-09 No fix listed CWE-79
TI-2024-01598 CVE-2024-1719 · GHSA-2cxh-2c7w-4jcj

Cross-site request forgery in Scott Paterson Easy PayPal & Stripe Buy Now Button

Priority LOW 20

The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Contact Form 7 – PayPal & Stripe Add-on all versions up to, and…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00297 Published 2024-02-28 No fix listed CWE-352
Open these records in search →