Log in Start free

mra13

Products

ProductCVEsExploitedLatest
Simple Shopping Cart8–Apr 4, 2026
Simple Download Monitor4–Feb 27, 2026
Accept Stripe Payments2–Jun 8, 2026
Compact WP Audio Player2–Jan 7, 2025
Stripe Payments2–Aug 24, 2026
WP Express Checkout (Accept PayPal Payments Easily)1–Mar 17, 2023

Exploited and recent CVEs

  • CVE-2026-78282 High 7.1 WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2021-47983 Medium 6.4 WordPress Plugin Stripe Payments < 2.0.40 Stored XSS via currency_code 0.2%
  • CVE-2026-0552 Medium 6.4 Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode 0.2%
  • CVE-2026-2383 Medium 6.4 Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field 0.2%
  • CVE-2025-8977 Medium 6.5 Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality 0.3%
  • CVE-2025-58197 Medium 6.5 WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-3890 Medium 6.4 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2025-3874 Medium 6.5 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference 0.4%
  • CVE-2025-3889 Medium 5.3 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' 0.4%
  • CVE-2025-3530 High 7.5 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation 0.5%
  • CVE-2025-3529 High 8.2 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter 0.4%
  • CVE-2025-24663 High 7.6 WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability 0.6%
  • CVE-2024-56279 Medium 6.4 WordPress Compact WP Audio Player plugin <= 1.9.14 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2024-12622 Medium 6.4 WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2023-48286 High 8.2 WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability 0.5%
  • CVE-2024-10176 Medium 6.4 Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode 0.3%
  • CVE-2024-7353 Medium 5.4 Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode 0.3%
  • CVE-2023-6497 Medium 4.4 WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-1469 Medium 4.4 The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitiz 0.4%