CVE-2024-25925

Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Easy Checkout Field Editor, Fees & Discounts.This issue affects WooCommerce Easy Checkout Field Editor, Fees & Discounts: from n/a through 3.5.12...

CVE-2024-43315

Authorization Bypass Through User-Controlled Key vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Payments For WooCommerce by Checkout: from n/a through 1.9.1...

CVE-2024-52440

Deserialization of Untrusted Data vulnerability in xpresslane Xpresslane Fast Checkout xpresslane-integration-for-woocommerce allows Object Injection.This issue affects Xpresslane Fast Checkout: from n/a through = 1.0.0...

CVE-2024-30527

Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout Accept PayPal Payments allows Manipulating Hidden Fields.This issue affects WP Express Checkout Accept PayPal Payments: from n/a through 2.3.7...

CVE-2024-44030

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Absolute Path Traversal.This issue affects Checkout Mestres WP: from n/a through = 8.6...

CVE-2024-35658

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeHigh Checkout Field Editor for WooCommerce Pro allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce Pro: from n/a through 3.6.2...

Malicious code in checkout_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153a7813e5b4eb21d53e60e52ce7b5fff2b807f28f0ad3d7d9f4d1e61121ed13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1071 Malicious code in checkout_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153a7813e5b4eb21d53e60e52ce7b5fff2b807f28f0ad3d7d9f4d1e61121ed13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paytm-blink-checkout-vue2-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385d687658556da26e8a2d0bb6c9e941618705df2a677b38734b42ee715d7c5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1165 Malicious code in paytm-blink-checkout-vue2-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385d687658556da26e8a2d0bb6c9e941618705df2a677b38734b42ee715d7c5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1166 Malicious code in paytm-blink-checkout-vue3-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53da4c93e68194060525f1ea8d686d00c5bbe1e73fa09bf04fd0ccfe8de97e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-paypal-checkout-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909c8505097e7b62c38bde6c75bb0ba8516f566136ec093b913944bcbdd1130e Any computer that has this package installed or running should be considered...

MAL-2025-745 Malicious code in nodejs-paypal-checkout-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909c8505097e7b62c38bde6c75bb0ba8516f566136ec093b913944bcbdd1130e Any computer that has this package installed or running should be considered...

Malicious code in meli-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac505cb26eb829b7873ae3ef5920a2fe35d4627fc36c958e35a24d261e0bc7df The OpenSSF Package Analysis project identified 'meli-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-548 Malicious code in meli-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac505cb26eb829b7873ae3ef5920a2fe35d4627fc36c958e35a24d261e0bc7df The OpenSSF Package Analysis project identified 'meli-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-526 Malicious code in lyft-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a21aaa2acd24b74ce7634bafecd7bc3e4f9508ef8062d748fb284d79f0661619 The OpenSSF Package Analysis project identified 'lyft-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a21aaa2acd24b74ce7634bafecd7bc3e4f9508ef8062d748fb284d79f0661619 The OpenSSF Package Analysis project identified 'lyft-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-512 Malicious code in linkedin-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1007e3b603874be7c1b16b45918cee3421169f7c44f4a1b302c8e1710f14402a The OpenSSF Package Analysis project identified 'linkedin-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in iberia-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a54db79a25a05a038514ad99f427a93d74f2a9b79fcf140647e71b8000e88be The OpenSSF Package Analysis project identified 'iberia-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...