Extension WordPress

Vulnérabilités Online Payments – Get Paid with PayPal, Square & Stripe

Cette page rassemble les failles publiées pour Online Payments – Get Paid with PayPal, Square & Stripe, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Online Payments – Get Paid with PayPal, Square & Stripe

4 fiches

CVE-2024-11895 Moyenne · 6,4
Online Payments – Get Paid with PayPal, Square & Stripe

Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Online Payments – Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and…

Versions affectées

*-3.20.0

Correctif

3.30.0

Publication

17/02/2025

CVE-2025-22661 Moyenne · 6,4
Online Payments – Get Paid with PayPal, Square & Stripe

Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Online Payments – Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping. This makes it…

Versions affectées

*-3.20.0

Correctif

3.30.0

Publication

15/01/2025

CVE-2023-2407 Moyenne · 6,1
Online Payments – Get Paid with PayPal, Square & Stripe

Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 – Cross-Site Request Forgery to Stored Cross-Site Scripting

The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Cross-Site Request Forgery. This is due to missing…

Versions affectées

*-3.10.0

Correctif

3.20.0

Publication

02/06/2023

CVE-2023-2406 Moyenne · 6,4
Online Payments – Get Paid with PayPal, Square & Stripe

Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerable to Stored Cross-Site Scripting via the 'email' parameter in…

Versions affectées

*-3.9.1

Correctif

3.10.0

Publication

02/06/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités