Vulnerabilities

TI-2025-30120 CVE-2025-47623 · GHSA-pc3v-pv9f-mwg5

WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-paypal allows Stored XSS.This issue affects Easy PayPal Buy Now…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00282 Published 2025-05-07 No fix listed CWE-79

TI-2023-28330 CVE-2023-51683 · GHSA-4rvh-837w-4r69

WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Easy PayPal & Stripe Buy Now Button.This issue affects Easy PayPal & Stripe Buy Now Button: from n/a through 1.8.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2024-02-28 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)