Naa986

Products

ProductCVEsExploitedLatest
Payment Button for PayPal2–Jan 17, 2026
WP Stripe Checkout2–Apr 18, 2024
Checkout for PayPal1–Jan 17, 2025
Easy Video Player1–Feb 1, 2024
Videojs HTML5 Player1–May 24, 2024

Exploited and recent CVEs

  • CVE-2025-14463 Medium 5.3 Payment Button for PayPal <= 1.2.3.41 - Missing Authorization to Unauthenticated Arbitrary Order Creation 0.4%
  • CVE-2024-13398 Medium 6.4 Checkout for PayPal <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-13401 Medium 6.4 Payment Button for PayPal <= 1.2.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-5205 Medium 6.4 Videojs HTML5 Player <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via videojs_video Shortcode 0.3%
  • CVE-2024-32571 Medium 6.5 WordPress WP Stripe Checkout plugin <= 1.2.2.41 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-51689 Medium 6.5 WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-52143 High 7.5 WordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure 0.5%