Wpplugin

Accept Donations With Paypal

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-47517

  • EPSS 0.01%
  • Veröffentlicht 07.05.2025 14:20:05
  • Zuletzt bearbeitet 09.06.2025 16:56:44

Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Accept Donations with PayPal allows Stored XSS. This issue affects Accept Donations with PayPal: from n/a through 1.4.5.

6.5

CVE-2021-24989

Exploit
  • EPSS 0.1%
  • Veröffentlicht 24.01.2022 08:15:09
  • Zuletzt bearbeitet 21.11.2024 05:54:08

The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the plugin, allowing attackers to make a logged in admin delete arbitrary posts from the blog

4.8

CVE-2021-24815

Exploit
  • EPSS 0.21%
  • Veröffentlicht 17.11.2021 11:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:49

The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is...

4.3

CVE-2021-24570

Exploit
  • EPSS 0.16%
  • Veröffentlicht 01.11.2021 09:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:19

The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create a new button is lacking a CSRF check. An attacker could use this to make an authenticated a...

4.3

CVE-2021-24572

Exploit
  • EPSS 0.14%
  • Veröffentlicht 01.11.2021 09:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:19

The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post wa...