CVE-2025-46499 WordPress PayPal Express Checkout plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hccoder PayPal Express Checkout paypal-express-checkout allows Stored XSS.This issue affects PayPal Express Checkout: from n/a through = 2.1.2...

WordPress plugin PayPal Express Checkout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-17806 · Unknown · Hccoder Paypal Express Checkout

Name of the Vulnerable Software and Affected Versions: hccoder PayPal Express Checkout versions n/a through 2.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CVE-2025-3530 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'producttmptwo'...

CVE-2025-3529

CVE-2025-3529 affects the WordPress WordPress Simple Shopping Cart plugin (versions up to 5.1.2). The issue is an unauthenticated "Sensitive Information Exposure" via the file_url parameter, allowing an attacker to view sensitive data and download a digital product without paying. Root cause: imp...

CVE-2025-3530

CVE-2025-3530 – WordPress Simple Shopping Cart (plugin) vulnerability : All versions up to and including 5.1.2 are susceptible to unauthenticated price manipulation due to a logic flaw in the cart-add path. The code inconsistently uses the parameters: it hashes pricing with the product_tmp_two pa...

CVE-2025-39562

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Payment Form for PayPal Pro payment-form-for-paypal-pro allows Stored XSS.This issue affects Payment Form for PayPal Pro: from n/a through = 1.1.72...

CVE-2025-39562 WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Payment Form for PayPal Pro payment-form-for-paypal-pro allows Stored XSS.This issue affects Payment Form for PayPal Pro: from n/a through = 1.1.72...

CVE-2025-39562 WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Payment Form for PayPal Pro payment-form-for-paypal-pro allows Stored XSS.This issue affects Payment Form for PayPal Pro: from n/a through = 1.1.72...

CVE-2025-39562

CVE-2025-39562 concerns the WordPress plugin Payment Form for PayPal Pro (codepeople) with a stored XSS vulnerability due to improper input neutralization during web page generation. Public records reference affected versions: 1.1.72 and earlier. Red Hat and CVE databases confirm the flaw and lin...

WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Doan Dinh Van / Fore-Z co.ltd in WordPress Plugin Payment Form for PayPal Pro versions = 1.1.72...

WordPress plugin Payment Form for PayPal Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-17183 · Codepeople · Codepeople Payment Form For Paypal Pro

Name of the Vulnerable Software and Affected Versions: codepeople Payment Form for PayPal Pro versions 1.1.72 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Checkout for PayPal versions = 1.0.38...

CVE-2025-39572

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through = 1.0.38...

CVE-2025-39572

CVE-2025-39572 : Stored XSS in WordPress plugin “Checkout for PayPal” (Noor Alam) due to improper neutralization of input during web page generation. Affected versions: Checkout for PayPal from n/a through 1.0.38. Root cause: input handling flaw that allows arbitrary script injection into generat...

CVE-2025-39572 WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through = 1.0.38...

WordPress plugin Checkout for PayPal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in invoicesettings-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de3a7f2639414d0e6ff7a0993317695868f6538efb3c2e2e32fae55dac833c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoicetemplate-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0040946fd67ce8ddd6e93a9a31d2bdfc1ba57b40874f62c2b033f3d2be5a5888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...