{"id":"CVE-2024-30527","aliases":["EUVD-2024-28447","GHSA-qvv7-6wf2-wr97"],"status":"published","title":"WordPress WP Express Checkout plugin \u003c= 2.3.7 - Price Manipulation vulnerability","description":"Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00521,"percentile":0.44723,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1284"],"published":"2024-05-17T08:20:59Z","modified":"2026-06-17T07:27:07Z","products":[{"vendor":"tips and tricks hq","product":"wp express checkout (accept paypal payments)"}],"references":[{"url":"https://patchstack.com/database/vulnerability/wp-express-checkout/wordpress-wp-express-checkout-plugin-2-3-7-price-manipulation-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30527"},{"url":"https://github.com/advisories/GHSA-qvv7-6wf2-wr97"}],"sources":{"cve":[{"id":"CVE-2024-30527","title":"WordPress WP Express Checkout plugin \u003c= 2.3.7 - Price Manipulation vulnerability","description":"Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.","status":"published","published":"2024-05-17T08:20:59.609Z","modified":"2026-04-28T16:09:26.267Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:34:07.482552Z"}],"euvd":[{"id":"EUVD-2024-28447","description":"Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.","status":"published","published":"2024-05-17T08:20:59Z","modified":"2026-04-28T16:09:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:06:07.488562Z"}],"ghsa":[{"id":"GHSA-qvv7-6wf2-wr97","title":"Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express...","description":"Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.","status":"published","published":"2024-05-17T09:31:02Z","modified":"2024-05-17T09:31:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:57:23.332275Z"}],"nvd":[{"id":"CVE-2024-30527","description":"Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.","status":"published","published":"2024-05-17T09:15:30.263Z","modified":"2026-06-17T07:27:07.693Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:09:59.094954Z"}]}}