Vulnerabilities

TI-2025-05363 CVE-2025-5937 · GHSA-cc2q-gjwf-xj6c

Cross-site request forgery in videowhisper MicroPayments – Fans Paysite: Paid Creator…

LOW 19

The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00174 Published 2025-06-28 No fix listed CWE-352

TI-2022-10610 CVE-2022-27629 · GHSA-pgwv-6cjg-6qr4

Cross-site request forgery in videowhisper MicroPayments - Paid Author Subscriptions…

MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00813 Published 2022-04-20 Fixed in 1.9.6 CWE-352

Vulnerabilities

Filters

Cross-site request forgery in videowhisper MicroPayments – Fans Paysite: Paid Creator…

Cross-site request forgery in videowhisper MicroPayments - Paid Author Subscriptions…