Advisories · Technology

AyeCode Ltd Payment forms, Buy now buttons, and Invoicing System | GetPaid.

Every CVE that names AyeCode Ltd Payment forms, Buy now buttons, and Invoicing System | GetPaid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119749 CVE record

CVSS 8.7 High

GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass
- AyeCode Ltd Payment forms, Buy now buttons, and Invoicing System | GetPaid
- CWE-1284
Not analysed yet 4 Nov 2026
CVE-2026-119748 CVE record

CVSS 6.9 Medium

GetPaid WordPress Plugin < 2.8.63 Authorization Bypass via maybe_use_invoice
- AyeCode Ltd Payment forms, Buy now buttons, and Invoicing System | GetPaid
- Broken access control
Not analysed yet 4 Nov 2026
CVE-2026-119747 CVE record

CVSS 7.1 High

GetPaid WordPress Plugin < 2.8.63 Incorrect Authorization via REST API
- AyeCode Ltd Payment forms, Buy now buttons, and Invoicing System | GetPaid
- Broken access control
Not analysed yet 4 Nov 2026