Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: WP Easy Pay Component: Wp Easypay Clear all filters
TI-2024-05435 CVE-2024-5861 · GHSA-j39v-xvqw-5q63

WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection

Priority LOW 35

The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpep_square_disconnect() function in all versions up to, and including…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00398 Published 2024-07-24 No fix listed CWE-862
TI-2023-01384 CVE-2023-1465 · GHSA-33wm-84cp-c2cq

WP EasyPay < 4.1 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-08-16 Fixed in 4.1