Log in Start free

scottpaterson

Products

ProductCVEsExploitedLatest
Contact Form 7 – PayPal & Stripe Add-on3–May 29, 2026
Business Essentials for Contact Form 73–Oct 1, 2026
Subscriptions & Memberships for PayPal2–Nov 22, 2025
Time Clock – A WordPress Employee & Volunteer Time Clock Plugin2–Oct 24, 2025
Easy PayPal Events & Tickets1–Sep 25, 2024
Easy PayPal & Stripe Buy Now Button1–Feb 28, 2024
Accept Donations with PayPal & Stripe1–Feb 23, 2025
Easy PayPal Gift Certificate1–Oct 12, 2024

Exploited and recent CVEs

  • CVE-2026-97661 High 7.2 Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field 0.2%
  • CVE-2026-9189 Medium 5.3 Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification) 0.2%
  • CVE-2025-12752 Medium 5.3 Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation 0.2%
  • CVE-2025-10701 Medium 6.4 Time Clock – A WordPress Employee & Volunteer Time Clock Plugin <= 1.3.1 - Authenticated (Custom+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13560 Medium 4.3 Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion 0.3%
  • CVE-2024-13728 Medium 6.1 Accept Donations with PayPal & Stripe <= 1.4.4 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-12423 Medium 6.1 Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-10685 Medium 6.1 Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-10683 Medium 6.1 Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-9593 High 8.3 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution 12.4%
  • CVE-2024-9592 Medium 6.1 Easy PayPal Gift Certificate <= 1.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wpppgc_plugin_options 0.1%
  • CVE-2024-8476 Medium 4.3 Easy PayPal Events <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion 0.2%
  • CVE-2024-1719 Medium 4.3 Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update 0.3%
  • CVE-2024-1719 Medium 4.3 Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update 0.3%