CVE-2025-66107

CVE-2025-66107 concerns the WordPress plugin Subscriptions & Memberships for PayPal (versions

EUVD-2021-11727

Malware in sbrugna...

EUVD-2021-2137

Malware in sbrugna...

EUVD-2023-12580

Malicious code in bioql PyPI...

EUVD-2023-12354

Malicious code in bioql PyPI...

EUVD-2024-53905

Malicious code in bioql PyPI...

EUVD-2025-6525

Malicious code in bioql PyPI...

EUVD-2022-51958

Malicious code in bioql PyPI...

EUVD-2024-51744

Malicious code in bioql PyPI...

EUVD-2024-51578

Malicious code in bioql PyPI...

EUVD-2024-51581

Malicious code in bioql PyPI...

EUVD-2025-5119

Malicious code in bioql PyPI...

EUVD-2024-50044

Malicious code in bioql PyPI...

EUVD-2025-7157

Malicious code in bioql PyPI...

CVE-2024-1719

The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Contact Form 7 – PayPal & Stripe Add-on all versions up to, and including 2.1. This is due to missing or incorrect nonce validation on the...

CVE-2024-5447

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowe...

CVE-2024-6021

The Donation Block For PayPal WordPress plugin through 2.1.0 does not sanitise and escape form submissions, leading to a stored cross-site scripting vulnerability...

CVE-2024-13401

The Payment Button for PayPal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppaypalcheckout' shortcode in all versions up to, and including, 1.2.3.35 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...

CVE-2024-13758

The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.52. This is due to missing or incorrect nonce validation on the cpcontactformpaypalcheckinitactions function. This makes it possible for unauthenticated...

CVE-2024-13398

The Checkout for PayPal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'checkoutforpaypal' shortcode in all versions up to, and including, 1.0.32 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...