Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Accept Donations with PayPal 1.3.1 Clear all filters
TI-2021-06857 CVE-2021-24572 · GHSA-887j-hc67-xww2

Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion

Priority LOW 20

The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00468 Published 2021-11-01 Fixed in 1.3.1 CWE-352
TI-2021-06855 CVE-2021-24570 · GHSA-8825-wr78-6h2r

Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting

Priority LOW 21

The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00504 Published 2021-11-01 Fixed in 1.3.1 CWE-352