Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Scott Paterson Component: Paypal & Stripe Add-on Clear all filters
TI-2024-09901 CVE-2024-10683 · GHSA-vg3h-mrrx-x458

Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting

Priority LOW 27

The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00401 Published 2024-11-09 No fix listed CWE-79
TI-2024-19304 CVE-2024-29130 · GHSA-34c4-jgq5-j63f

WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-19 No fix listed CWE-79
TI-2024-01598 CVE-2024-1719 · GHSA-2cxh-2c7w-4jcj

Cross-site request forgery in Scott Paterson Easy PayPal & Stripe Buy Now Button

Priority LOW 20

The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Contact Form 7 – PayPal & Stripe Add-on all versions up to, and…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00297 Published 2024-02-28 No fix listed CWE-352