Skip to content
Scottpaterson vulnerabilities
Newest
-
scottpaterson easy paypal & stripe buy now button
Easy PayPal & Stripe Buy Now Button 1.8 - 2.0.5 - Unauthenticated Payment Amount Manipulation via Client-Supplied Price
CVE-2026-90987
5.3 Medium
-
scottpaterson business essentials for contact form 7
Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field
CVE-2026-97661
7.2 High
-
scott paterson accept donations with paypal & stripe
WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65518
6.5 Medium
-
scott paterson contact form 7 – paypal & stripe add-on
Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification)
CVE-2026-9189
5.3 Medium
-
scott paterson accept donations with paypal & stripe
WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability
CVE-2025-68602
4.7 Medium
-
scott paterson subscriptions & memberships for paypal
Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation
CVE-2025-12752
5.3 Medium
-
scottpaterson time clock – a wordpress employee & volunteer time clock plugin
Time Clock – A WordPress Employee & Volunteer Time Clock Plugin <= 1.3.1 - Authenticated (Custom+) Stored Cross-Site Scripting
CVE-2025-10701
6.4 Medium
-
scott paterson accept donations with paypal & stripe, wpplugin accept donations with paypal +1 more
WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability
CVE-2025-47517
7.1 High
-
scott paterson subscriptions & memberships for paypal
Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2024-13560
4.3 Medium
-
scottpaterson accept donations with paypal & stripe
Accept Donations with PayPal & Stripe <= 1.4.4 - Reflected Cross-Site Scripting
CVE-2024-13728
6.1 Medium
-
scottpaterson business essentials for contact form 7
Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting
CVE-2024-12423
6.1 Medium
-
scottpaterson business essentials for contact form 7, wpplugin contact form 7 redirect \& thank you page +1 more
Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting
CVE-2024-10685
6.1 Medium
-
scott paterson contact form 7 – paypal & stripe add-on, wpplugin paypal \& stripe add-on +1 more
Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting
CVE-2024-10683
6.1 Medium
-
scott paterson time clock pro, wpplugin time clock, scottpaterson time clock – a wordpress employee & volunteer time clock plugin +2 more
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
CVE-2024-9593
Public exploit
EPSS 12.4%
8.3 High
-
scottpaterson easy paypal gift certificate
Easy PayPal Gift Certificate <= 1.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wpppgc_plugin_options
CVE-2024-9592
6.1 Medium
-
wpplugin easy paypal events, scottpaterson easy paypal events & tickets +1 more
Easy PayPal Events <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion
CVE-2024-8476
4.3 Medium
-
scott paterson easy paypal & stripe buy now button, wpplugin easy paypal \& stripe buy now button +1 more
WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-51683
5.4 Medium
-
scott paterson contact form 7 – paypal & stripe add-on, scottpaterson easy paypal & stripe buy now button, wpplugin paypal \& stripe add-on +2 more
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update
CVE-2024-1719
4.3 Medium
-
scott paterson contact form 7 redirect & thank you page, wpplugin contact form 7 redirect \& thank you page +1 more
WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24395
5.4 Medium