CVE-2021-24369

CVE-2021-24369 affects the GetPaid WordPress plugin prior to 2.3.4. The issue arises because the Label and Help Text fields were not properly sanitized, allowing authenticated users with at least a Contributor role to create a Payment Form that can contain malicious content (e.g., img tags). This...

CVE-2024-43973

CVE-2024-43973 affects GetPaid (WordPress plugin) by AyeCode, with Missing Authorization via column_subscription() in versions up to 2.8.11. Public records (NVD/NVD-derived CVE feeds) confirm a broken access control allowing unauthorized activity related to GetPaid’s subscription data. PT-Securit...