Extension WordPress
Vulnérabilités Easy PayPal & Stripe Buy Now Button
Cette page rassemble les failles publiées pour Easy PayPal & Stripe Buy Now Button, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Easy PayPal & Stripe Buy Now Button
6 fiches
Easy PayPal Buy Now Button <= 2.0 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Easy PayPal Buy Now Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-2.0
2.0.1
07/05/2025
Easy PayPal Buy Now Button <= 1.9 – Unauthenticated Open Redirect
The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.9. This is due to insufficient validation on the redirect url supplied via the 'rf'…
*-1.9
1.9.1
09/08/2024
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 – Cross-Site Request Forgery to Settings Update
The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Contact Form 7 – PayPal & Stripe Add-on all versions up…
*-1.8.3
1.9
27/02/2024
Easy PayPal Buy Now Button <= 1.8.1 – Cross-Site Request Forgery
The Easy PayPal Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on one of its functions. This makes…
*-1.8.1
1.8.2
27/12/2023
Easy PayPal Buy Now Button <= 1.7.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Easy PayPal Buy Now Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-1.7.3
1.7.4
19/01/2023
Easy PayPal Buy Now Button <= 1.7.2 – Cross-Site Request Forgery to Cross-Site Scripting
The Easy PayPal Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including, 1.7.2. This is due to missing or incorrect nonce validation on the wpecpp_settingsoptions function.…
[*, 1.7.3)
1.7.3
12/06/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.