Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: WooCommerce Component: Paypal Checkout Payment Gateway Clear all filters
TI-2019-11171 CVE-2019-14979 · GHSA-mrxg-h5cf-j2qr

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17…

Priority LOW 32

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lowe…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0109 Published 2019-08-29 No fix listed CWE-20
TI-2019-05301 CVE-2019-7441 · GHSA-c394-j3rr-w25m

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8…

Priority LOW 38

cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05939 Published 2019-03-20 No fix listed