Accept Donations With Paypal
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:accept_donations_with_paypal:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Accept Donations With Paypal (0d777ff1-8c28-549a-9626-fd342bc1da3f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24989 |
vulnerable | 2026-06-08 05:30:39.754912 |
Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF
The Accept Donations with PayPal WordPress plugin before 1.3.4 does not have CSRF check in place and does not ensure that the post to be deleted belongs to the plugin, allowing attackers to make a logged in admin delete arbitrary posts from the blog
Published: 2022-01-24T08:01:05.000Z
Updated: 2024-08-03T19:49:14.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24815 |
vulnerable | 2026-06-08 05:30:39.291399 |
Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting
The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2021-11-17T10:15:44.000Z
Updated: 2024-08-03T19:42:17.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24572 |
vulnerable | 2026-06-08 05:30:38.786514 |
Paypal Donation < 1.3.1 - CSRF to Arbitrary Post Deletion
The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post was a button post. As a result, an attacker could make logged in admins delete arbitrary posts
Published: 2021-11-01T08:46:01.000Z
Updated: 2024-08-03T19:35:20.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24570 |
vulnerable | 2026-06-08 05:30:38.783046 |
Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site Scripting
The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create a new button is lacking a CSRF check. An attacker could use this to make an authenticated admin create a new button. Furthermore, one of the Button field is not escaped before being output in an attribute when editing a Button, leading to a Stored Cross-Site Scripting issue as well.
Published: 2021-11-01T08:46:00.000Z
Updated: 2024-08-03T19:35:20.193Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.