Paypal vulnerabilities

Products

• Paypal 3
• Braintree\/sanitize-url 2
• Payments Pro 2
• Payments Standard 2
• Brasil Para Woocommerce 2
• Php Toolkit 2

Newest

• odefranca paypal brasil para woocommerce, paypal brasil para woocommerce +1 more PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action CVE-2026-76058 5.3 MediumOctober 28, 2026
• paypal brasil para woocommerce WordPress PayPal Brasil para WooCommerce plugin <= 1.4.2 - Broken Access Control vulnerability CVE-2023-25026 4.3 MediumDecember 9, 2024
• paypal braintree\/sanitize-url @braintree/sanitize-url Cross-site Scripting vulnerability CVE-2022-48345 Fix available 6.1 MediumFebruary 24, 2023
• paypal nemo-appium nemo-appium vulnerable to OS Command Injection CVE-2022-21129 Fix available 7.4 HighJanuary 31, 2023
• fedoraproject fedora, paypal braintree\/sanitize-url +1 more Cross-site Scripting (XSS) CVE-2021-23648 Fix available 5.4 MediumMarch 16, 2022
• paypal adaptive payments sdk paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS CVE-2017-6217 6.1 MediumJuly 10, 2019
• paypal php permissions sdk paypal/permissions-sdk-php reflected Cross-site Scripting (XSS) CVE-2017-6215 5.4 MediumAugust 2, 2018
• paypal php invoice sdk paypal/invoice-sdk-php reflected XSS CVE-2017-6213 5.4 MediumAugust 2, 2018
• paypal The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to... CVE-2013-7202 8.1 HighApril 27, 2018
• paypal WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man... CVE-2013-7201 7.4 HighApril 27, 2018
• paypal merchant-sdk-php PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability CVE-2017-6099 Fix available 6.1 MediumFebruary 23, 2017
• paypal wps toolkit PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject... CVE-2011-5237 5.8 MediumNovember 6, 2012
• paypal payments pro, zen-cart zen cart +1 more The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a... CVE-2012-5806 5.8 MediumNovember 4, 2012
• zen-cart zen cart, paypal instant payment notification +1 more The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a... CVE-2012-5805 5.8 MediumNovember 4, 2012
• paypal, ubercart +1 more The PayPal module in Ubercart does not verify that the server hostname matches a domain name in... CVE-2012-5802 5.8 MediumNovember 4, 2012
• oscommerce, paypal payflow pro express checkout +1 more The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a... CVE-2012-5798 5.8 MediumNovember 4, 2012
• oscommerce, paypal pro +1 more The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain... CVE-2012-5796 5.8 MediumNovember 4, 2012
• paypal invoicing PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's... CVE-2012-5791 5.8 MediumNovember 4, 2012
• paypal payments standard PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a... CVE-2012-5790 5.8 MediumNovember 4, 2012
• paypal payments standard PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname... CVE-2012-5789 5.8 MediumNovember 4, 2012
• paypal ipn The PayPal IPN utility does not verify that the server hostname matches a domain name in the... CVE-2012-5788 5.8 MediumNovember 4, 2012
• paypal merchant sdk The PayPal merchant SDK does not verify that the server hostname matches a domain name in the... CVE-2012-5787 5.8 MediumNovember 4, 2012
• apache activemq, axis, paypal mass pay +2 more +4 more Man-in-the-middle attack in Apache Axis CVE-2012-5784 Fix available 5.8 MediumNovember 4, 2012
• oscommerce online merchant, paypal website payments standard module +1 more The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant... CVE-2012-2991 5.0 MediumSeptember 19, 2012
• paypal ubercart payflow The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers... CVE-2012-2058 5.0 MediumSeptember 17, 2012
• paypal php toolkit Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly... CVE-2006-0202 3.6 LowJanuary 13, 2006
• paypal php toolkit Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly... CVE-2006-0201 5.0 MediumJanuary 13, 2006