Lucene search
+L

465 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 2:18 a.m.•19 views

CVE-2023-51484

Improper Authentication vulnerability in wp-buy Login as User or Customer User Switching allows Privilege Escalation.This issue affects Login as User or Customer User Switching: from n/a through 3.8...

9.8CVSS8.6AI score0.00697EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:00 a.m.•12 views

CVE-2023-47557

Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time Statistics: from n/a through = 7.2...

4.3CVSS7.3AI score0.00362EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:21 a.m.•19 views

CVE-2022-4628

The Easy PayPal Buy Now Button WordPress plugin before 1.7.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

5.4CVSS5.9AI score0.00477EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/09 3:26 p.m.•21 views

CVE-2025-47623

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-paypal allows Stored XSS.This issue affects Easy PayPal Buy Now Button: from n/a through = 2.0...

5.9CVSS7.2AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 3:16 p.m.•30 views

CVE-2025-47623

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-paypal allows Stored XSS.This issue affects Easy PayPal Buy Now Button: from n/a through = 2.0...

5.9CVSS0.00265EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/07 3:16 p.m.•14 views

CVE-2025-47623

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Easy PayPal Buy Now Button allows Stored XSS. This issue affects Easy PayPal Buy Now Button: from n/a through 2.0...

4.8CVSS7.3AI score0.00265EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/07 3:05 p.m.•16 views

WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Easy PayPal Buy Now Button versions = 2.0...

5.9CVSS7.1AI score0.00265EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/07 2:20 p.m.•14 views

CVE-2025-47623 WordPress Easy PayPal Buy Now Button <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Easy PayPal Buy Now Button allows Stored XSS. This issue affects Easy PayPal Buy Now Button: from n/a through 2.0...

5.9CVSS5.7AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•36 views

CVE-2025-47623 WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-paypal allows Stored XSS.This issue affects Easy PayPal Buy Now Button: from n/a through = 2.0...

5.9CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 2:20 p.m.•68 views

CVE-2025-47623

CVE-2025-47623 : A stored XSS vulnerability in the WordPress plugin “Easy PayPal Buy Now Button” (versions n/a through 2.0) arises from improper input neutralization during web page generation. The issue is triggered when user-supplied input is reflected in pages, allowing an attacker to store an...

5.9CVSS7.2AI score0.00265EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•4 views

CVE-2025-47623: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-paypal allows Stored XSS.This issue affects Easy PayPal Buy Now Button: from n/a through = 2.0...

5.9CVSS5.8AI score0.00265EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•15 views

PT-2025-20189 · Unknown · Easy Paypal Buy Now Button

Name of the Vulnerable Software and Affected Versions: Easy PayPal Buy Now Button versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

5.9CVSS6.2AI score0.00265EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•17 views

WordPress plugin Easy PayPal Buy Now Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

5.9CVSS6AI score0.00265EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:00 p.m.•38 views

CVE-2025-32266

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...

4.3CVSS7.2AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•19 views

CVE-2025-32266

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...

4.3CVSS0.00188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•2 views

CVE-2025-32266: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in wp-buy 404 Image Redirection Replace Broken Images broken-images-redirection allows Cross Site Request Forgery.This issue affects 404 Image Redirection Replace Broken Images: from n/a through = 1.4...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:29 p.m.•13 views

CVE-2025-31570

Cross-Site Request Forgery CSRF vulnerability in wp-buy Related Posts Widget with Thumbnails advanced-css3-related-posts-widget allows Stored XSS.This issue affects Related Posts Widget with Thumbnails: from n/a through = 1.2...

7.1CVSS7.2AI score0.00141EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:28 p.m.•12 views

CVE-2025-31569

Cross-Site Request Forgery CSRF vulnerability in wp-buy wordpress related Posts with thumbnails related-posts-list-grid-and-slider-all-in-one allows Stored XSS.This issue affects wordpress related Posts with thumbnails: from n/a through = 3.0.0.1...

7.1CVSS7.2AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/31 1:15 p.m.•13 views

CVE-2025-31569

Cross-Site Request Forgery CSRF vulnerability in wp-buy wordpress related Posts with thumbnails related-posts-list-grid-and-slider-all-in-one allows Stored XSS.This issue affects wordpress related Posts with thumbnails: from n/a through = 3.0.0.1...

7.1CVSS0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 12:55 p.m.•60 views

CVE-2025-31569

Technical details for CVE-2025-31569 are not provided in the supplied documents. Monitor for updates.

7.1CVSS7.2AI score0.00141EPSS
SaveExploits0References1
Rows per page
Query Builder