Lucene search
WpvulndbWPVDB-ID:CA51A940-4F01-459B-9596-1B2BEF5524E0HistoryFeb 14, 2023 - 12:00 a.m.
Quick Paypal Payments < 5.7.26 - Unauthenticated Payment Message Deletion/Update
2023-02-1400:00:00
wpscan.com
5
paypal
payments
unauthenticated
deletion
update
authorization
download logs
export
messages
0 Low
EPSS
Percentile
0.0%
The plugin does not have authorisation in the download_logs function, allowing unauthenticated users to export, delete payment messages, as well as update payment message options
| CPE | Name | Operator | Version |
|---|---|---|---|
| quick-paypal-payments | lt | 5.7.26 |
