Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: AyeCode Ltd Component: Getpaid Clear all filters
TI-2024-29562 CVE-2024-43973 · GHSA-cr5c-wqxh-9q79

WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00466 Published 2024-11-01 No fix listed CWE-862
TI-2021-06661 CVE-2021-24369 · GHSA-83pg-f5q7-v37g

GetPaid < 2.3.4 - Authenticated Stored XSS

Priority LOW 25

In the GetPaid WordPress plugin before 2.3.4, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-06-21 Fixed in 2.3.4 CWE-79