WordPress Easy PayPal & Stripe Buy Now Button plugin <= 1.9 - Open Redirection vulnerability
CVE-2024-43236

4.7MEDIUM

Key Information:

Vendor

WordPress
Status
Easy Paypal Buy Now Button
Vendor
CVE Published:
19 August 2024

What is CVE-2024-43236?

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issue affects Easy PayPal Buy Now Button: from n/a through 1.9.

Affected Version(s)

Easy PayPal Buy Now Button <= 1.9

References

https://patchstack.com/database/vulnerability/wp-ecommerc...
vdb-entry

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

Credit

stealthcopter (Patchstack Alliance)
.