Naa986
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Payment Button for PayPal | 2 | – | Jan 17, 2026 |
| WP Stripe Checkout | 2 | – | Apr 18, 2024 |
| Checkout for PayPal | 1 | – | Jan 17, 2025 |
| Easy Video Player | 1 | – | Feb 1, 2024 |
| Videojs HTML5 Player | 1 | – | May 24, 2024 |
Exploited and recent CVEs
- CVE-2025-14463 Payment Button for PayPal <= 1.2.3.41 - Missing Authorization to Unauthenticated Arbitrary Order Creation 0.4%
- CVE-2024-13398 Checkout for PayPal <= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-13401 Payment Button for PayPal <= 1.2.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
- CVE-2024-5205 Videojs HTML5 Player <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via videojs_video Shortcode 0.3%
- CVE-2024-32571 WordPress WP Stripe Checkout plugin <= 1.2.2.41 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-51689 WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2023-52143 WordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure 0.5%