6.5
Medium
CVE-2023-23889 Auth
Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quick Paypal Payments 5.7 | earliest → 5.7.25 | No fix stated |
Other CVEs of Quick Paypal Payments
The 6 CVEs of Quick Paypal Payments →
CVE-2025-27003
Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross…
4.3
Medium
CVE-2023-25714
Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access…
7.5
High
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Medium
CVE-2023-25713
Unauth
7.1
High