Log in Start free

Scott Paterson

Products

ProductCVEsExploitedLatest
Contact Form 7 – PayPal & Stripe Add-on5–Aug 13, 2026
Easy PayPal Buy Now Button3–Aug 6, 2026
Accept Donations with PayPal & Stripe3–Jul 23, 2026
easy-paypal-events-tickets2–May 4, 2026
Easy PayPal & Stripe Buy Now Button1–Feb 28, 2024
Easy PayPal Events1–May 7, 2025
Contact Form 7 Redirect & Thank You Page1–Jul 10, 2023
Easy PayPal Shopping Cart1–Nov 16, 2023
Easy Stripe1–Jul 4, 2025
ScottCart1–Oct 28, 2024
Subscriptions & Memberships for PayPal1–Nov 21, 2025
Time Clock1–May 7, 2025
Time Clock Pro1–Oct 18, 2024

Exploited and recent CVEs

  • CVE-2026-66660 Medium 6.5 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-65517 High 7.1 WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65518 Medium 6.5 WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-41471 High 7.5 Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint 0.3%
  • CVE-2026-32834 High 7.5 Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning 0.4%
  • CVE-2025-68602 Medium 4.7 WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability 0.5%
  • CVE-2025-66107 Medium 5.3 WordPress Subscriptions & Memberships for PayPal plugin <= 1.1.7 - Broken Access Control vulnerability 0.2%
  • CVE-2025-49302 Critical 10.0 WordPress Easy Stripe plugin <= 1.1 - Remote Code Execution (RCE) Vulnerability 0.4%
  • CVE-2025-47623 Medium 5.9 WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-47519 Medium 4.3 WordPress Easy PayPal Events plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-47518 Medium 5.9 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-47517 High 7.1 WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2025-47516 Medium 5.9 WordPress Time Clock plugin <= 1.2.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-50492 High 8.3 WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability 1.4%
  • CVE-2024-9593 High 8.3 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution 12.4%
  • CVE-2024-48021 High 7.1 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-43236 Medium 4.7 WordPress Easy PayPal & Stripe Buy Now Button plugin <= 1.9 - Open Redirection vulnerability 0.3%
  • CVE-2024-29130 High 7.1 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-51683 Medium 5.4 WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-47239 Medium 6.5 WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-24405 Medium 5.4 WordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-24395 Medium 5.4 WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%