Advisories · Technology
scottpaterson Contact Form 7 – PayPal & Stripe Add-on.
Every CVE that names scottpaterson Contact Form 7 – PayPal & Stripe Add-on among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification)
- scottpaterson Contact Form 7 – PayPal & Stripe Add-on
- CWE-345
- CVSS 6.1 Medium
Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting
- scottpaterson Contact Form 7 – PayPal & Stripe Add-on
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update
- scottpaterson Easy PayPal & Stripe Buy Now Button
- scottpaterson Contact Form 7 – PayPal & Stripe Add-on
- Cross-site request forgery (CSRF)