Skip to content
Scott Paterson vulnerabilities
Newest
-
scott paterson contact form 7 – paypal & stripe add-on
WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability
CVE-2026-66660
6.5 Medium
-
scott paterson easy paypal buy now button
WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65517
7.1 High
-
scott paterson accept donations with paypal & stripe
WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65518
6.5 Medium
-
scott paterson contact form 7 – paypal & stripe add-on
Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification)
CVE-2026-9189
5.3 Medium
-
scott paterson easy-paypal-events-tickets
Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint
CVE-2026-41471
8.2 High
-
scott paterson easy-paypal-events-tickets
Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning
CVE-2026-32834
8.7 High
-
scott paterson accept donations with paypal & stripe
WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability
CVE-2025-68602
4.7 Medium
-
scott paterson subscriptions & memberships for paypal
Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation
CVE-2025-12752
5.3 Medium
-
scott paterson subscriptions & memberships for paypal
WordPress Subscriptions & Memberships for PayPal plugin <= 1.1.7 - Broken Access Control vulnerability
CVE-2025-66107
5.3 Medium
-
scott paterson easy stripe
WordPress Easy Stripe plugin <= 1.1 - Remote Code Execution (RCE) Vulnerability
CVE-2025-49302
10.0 Critical
-
scott paterson easy paypal buy now button, wpplugin easy paypal \& stripe buy now button +1 more
WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47623
5.9 Medium
-
scott paterson easy paypal events
WordPress Easy PayPal Events plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47519
4.3 Medium
-
scott paterson contact form 7 – paypal & stripe add-on
WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47518
5.9 Medium
-
scott paterson accept donations with paypal & stripe, wpplugin accept donations with paypal +1 more
WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability
CVE-2025-47517
7.1 High
-
scott paterson time clock
WordPress Time Clock plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47516
5.9 Medium
-
scott paterson subscriptions & memberships for paypal
Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2024-13560
4.3 Medium
-
scott paterson contact form 7 – paypal & stripe add-on, wpplugin paypal \& stripe add-on +1 more
Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting
CVE-2024-10683
6.1 Medium
-
scott paterson scottcart
WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability
CVE-2024-50492
Public exploit
8.3 High
-
scott paterson time clock pro, wpplugin time clock, scottpaterson time clock – a wordpress employee & volunteer time clock plugin +2 more
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
CVE-2024-9593
Public exploit
EPSS 12.4%
8.3 High
-
scott paterson contact form 7 – paypal & stripe add-on
WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-48021
7.1 High
-
scott paterson easy paypal buy now button
WordPress Easy PayPal & Stripe Buy Now Button plugin <= 1.9 - Open Redirection vulnerability
CVE-2024-43236
4.7 Medium
-
scott paterson contact form 7 – paypal & stripe add-on, wpplugin paypal \& stripe add-on +1 more
WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29130
7.1 High
-
scott paterson easy paypal & stripe buy now button, wpplugin easy paypal \& stripe buy now button +1 more
WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-51683
5.4 Medium
-
scott paterson contact form 7 – paypal & stripe add-on, scottpaterson easy paypal & stripe buy now button, wpplugin paypal \& stripe add-on +2 more
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update
CVE-2024-1719
4.3 Medium
-
scott paterson easy paypal shopping cart
WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47239
6.5 Medium
-
scott paterson contact form 7 – paypal & stripe add-on, wpplugin paypal \& stripe add-on +1 more
WordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24405
5.4 Medium
-
scott paterson contact form 7 redirect & thank you page, wpplugin contact form 7 redirect \& thank you page +1 more
WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24395
5.4 Medium
-
scott paterson easy paypal buy now button
Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode
CVE-2022-4628
5.4 Medium
-
scott paterson accept donations with paypal
Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF
CVE-2021-24989
6.5 Medium
-
scott paterson accept donations with paypal
Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting
CVE-2021-24815
4.8 Medium
-
scott paterson accept donations with paypal
Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion
CVE-2021-24572
4.3 Medium
-
scott paterson accept donations with paypal
Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting
CVE-2021-24570
4.3 Medium