Extension WordPress
Vulnérabilités WP Express Checkout (Fast Payments via PayPal & Stripe)
Cette page rassemble les failles publiées pour WP Express Checkout (Fast Payments via PayPal & Stripe), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Express Checkout (Fast Payments via PayPal & Stripe)
2 fiches
WP Express Checkout (Accept PayPal Payments) <= 2.3.7 – Unauthenticated Price Manipulation
The WP Express Checkout (Accept PayPal Payments) plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 2.3.7. This is due to insufficient validation on the pricing data being passed to the server.…
*-2.3.7
2.3.8
29/03/2024
WP Express Checkout <= 2.2.8 – Authenticated (Admin+) Stored Cross-Site Scripting via pec_coupon[code]
The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
2.2.8
2.2.9
17/03/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.