Threat Entry Updated 2025-05-30

CVE-2024-6021 - Donation Block For Paypal Plugin

The Donation Block For PayPal WordPress plugin through 2.1.0 does not sanitise and escape form submissions, leading to a stored cross-site scripting vulnerability

PLUGIN Donation Block For Paypal

CVE-2024-6021

MEDIUM CVSS 6.8 2024-07-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-03-10

CVE-2023-0535 - Donation Block For Paypal Plugin

The Donation Block For PayPal WordPress plugin before 2.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

PLUGIN Donation Block For Paypal

CVE-2023-0535

MEDIUM CVSS 5.4 2023-02-27

Risk Score

Open Full Technical Breakdown