CVE-2021-4411

CVE-2021-4411 involves the WP EasyPay – Square for WordPress plugin for WordPress, with a Cross-Site Request Forgery flaw up to version 3.2.0 caused by missing or incorrect nonce validation in the wpep_download_transaction_in_excel() function. This allows unauthenticated attackers to trigger a tr...

CVE-2023-1465

CVE-2023-1465 affects the WordPress plugin WP EasyPay (versions before 4.1). The issue is a failure to escape generated URLs before output, causing a reflected XSS vulnerability that could be triggered against high-privilege users (e.g., admins). Public details in PatchStack and CVE sources confi...

CVE-2024-5861

CVE-2024-5861 affects the WordPress plugin WP EasyPay – Square for WordPress (versions

CVE-2022-47177

CVE-2022-47177 is a CSRF vulnerability in the WP EasyPay – Square for WordPress plugin affecting versions