Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-02
Easy PayPal & Stripe Buy Now Button - Security Vulnerability (CVE-2026-90987)
The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase.
PLUGIN
Easy PayPal & Stripe Buy Now Button
CVE-2026-90987
Risk Score
Threat Entry
Updated 2026-06-17
Easy Paypal Stripe Buy Now Button - Cross-Site Scripting (XSS) (CVE-2025-47623)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Easy PayPal Buy Now Button wp-ecommerce-paypal allows Stored XSS.This issue affects Easy PayPal Buy Now Button: from n/a through
PLUGIN
Easy Paypal Stripe Buy Now Button
CVE-2025-47623
Risk Score
Threat Entry
Updated 2026-06-17
Easy Paypal Stripe Buy Now Button - Cross-Site Request Forgery (CSRF) (CVE-2023-51683)
Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Easy PayPal & Stripe Buy Now Button.This issue affects Easy PayPal & Stripe Buy Now Button: from n/a through 1.8.1.
PLUGIN
Easy Paypal Stripe Buy Now Button
CVE-2023-51683
Risk Score
Threat Entry
Updated 2026-06-17
Easy Paypal Stripe Buy Now Button - Cross-Site Request Forgery (CSRF) (CVE-2024-1719)
The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.3 and in Contact Form 7 – PayPal & Stripe Add-on all versions up to, and including 2.1. This is due to missing or incorrect nonce validation on the 'wpecpp_stripe_connect_completion' function. This makes it possible for unauthenticated attackers to modify the plugins settings and chance the stripe connection via a forged request granted they can trick a site administrator into performing an action such as clicking…
PLUGIN
Easy Paypal Stripe Buy Now Button
CVE-2024-1719
Risk Score