36 matches found
EUVD-2025-205233
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Scott Paterson Accept Donations with PayPal easy-paypal-donation allows Phishing.This issue affects Accept Donations with PayPal: from n/a through = 1.5.1...
PT-2025-53290
Name of the Vulnerable Software and Affected Versions Scott Paterson Accept Donations with PayPal versions prior to 1.5.1 Description The software contains a URL redirection issue that could allow for phishing attacks. The issue involves redirection to untrusted sites. Recommendations Update Scot...
EUVD-2024-42893
Malicious code in bioql PyPI...
EUVD-2023-51371
Malicious code in bioql PyPI...
EUVD-2023-28451
Malicious code in bioql PyPI...
CVE-2025-49302
Improper Control of Generation of Code 'Code Injection' vulnerability in Scott Paterson Easy Stripe easy-stripe allows Remote Code Inclusion.This issue affects Easy Stripe: from n/a through = 1.1...
CVE-2025-49302 WordPress Easy Stripe plugin <= 1.1 - Remote Code Execution (RCE) Vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in Scott Paterson Easy Stripe easy-stripe allows Remote Code Inclusion.This issue affects Easy Stripe: from n/a through = 1.1...
CVE-2023-24395
Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Contact Form 7 Redirect & Thank You Page plugin = 1.0.3 versions...
CVE-2023-47239
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin = 1.1.10 versions...
CVE-2025-47516
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Time Clock time-clock allows Stored XSS.This issue affects Time Clock: from n/a through = 1.2.3...
CVE-2025-47516
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Time Clock time-clock allows Stored XSS.This issue affects Time Clock: from n/a through = 1.2.3...
CVE-2025-47519
CVE-2025-47519 is a CSRF vulnerability in WordPress plugin WordPress Easy PayPal Events (versions
CVE-2025-47518 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on contact-form-7-paypal-add-on allows Stored XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through = 2.3.4...
CVE-2025-47516
CVE-2025-47516 concerns the WordPress Time Clock plugin by Scott Paterson. Multiple connected sources confirm a stored XSS vulnerability arising from improper neutralization of input during web page generation, affecting Time Clock versions up to 1.2.3 (and earlier). The core issue is cross-site ...
PT-2025-20141 · Unknown · Scott Paterson Easy Paypal Events
Name of the Vulnerable Software and Affected Versions: Scott Paterson Easy PayPal Events versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For version...
CVE-2024-29130
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0...
CVE-2024-50492
Improper Control of Generation of Code 'Code Injection' vulnerability in Scott Paterson ScottCart scottcart allows Code Injection.This issue affects ScottCart: from n/a through = 1.1...
CVE-2024-50492
CVE-2024-50492 involves the WordPress plugin ScottCart (versions n/a through 1.1). The issue stems from an unprotected AJAX action that executes: call_user_func($_POST['function']); this allows unauthenticated remote code execution (RCE). Public artifacts describe unauthenticated function invocat...
CVE-2024-48021 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.3...
CVE-2024-43236
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issue affects Easy PayPal Buy Now Button: from n/a through 1.9...