Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

paypal checkout payment gateway vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2019-16251
plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework up to and including 3.3.8 for WordPress allows authenticated options changes.
Yithemes Yith Woocommerce WishlistYithemes Yith Woocommerce CompareYithemes Yith Woocommerce Quick ViewYithemes Yith Woocommerce Zoom MagnifierYithemes Yith Woocommerce Ajax SearchYithemes Yith Woocommerce Badge ManagementYithemes Yith Woocommerce Brands Add-onYithemes Yith Woocommerce Request A QuoteYithemes Yith Woocommerce Social LoginYithemes Yith Woocommerce Order TrackingYithemes Yith Woocommerce Pdf Invoice And Shipping ListYithemes Yith Pre-order For WoocommerceYithemes Yith Woocommerce Advanced ReviewsYithemes Yith Woocommerce Product Add-onsYithemes Yith Woocommerce Gift CardsYithemes Yith Woocommerce SubscriptionYithemes Yith Woocommerce AffiliatesYithemes Yith Woocommerce Cart MessagesYithemes Yith Woocommerce Product BundlesYithemes Yith Woocommerce Frequently Bought TogetherYithemes Yith Woocommerce Multi-step CheckoutYithemes Yith Color And Label Variations For Woocommerce
5
CVSSv2
CVE-2019-14979
cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it...
Woocommerce Paypal Checkout Payment Gateway 1.6.17
4
CVSSv2
CVE-2019-7441
cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it ...
Woocommerce Paypal Checkout Payment Gateway 1.6.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook