Approved changes feed: RSS · Atom

cpe:2.3:a:leaky_paywall:leaky_paywall:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLeaky Paywall (9cdc2419-f4aa-5168-8f44-ef0f5f0e1e2d)
ProductLeaky Paywall (524e8131-e586-5970-b1b9-4be86cd5d00e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37540 vulnerable 2026-06-08 06:39:47.890089 WordPress Leaky Paywall plugin <= 4.21.2 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Cross Site Request Forgery.This issue affects Leaky Paywall: from n/a through <= 4.21.2.
Published: 2025-01-02T12:01:01.252Z
Updated: 2026-04-28T16:10:00.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33594 vulnerable 2026-06-08 06:37:31.716913 WordPress Leaky Paywall plugin <= 4.20.8 - Price Manipulation vulnerability
HIGH (7.5)
Missing Authorization vulnerability in Leaky Paywall.This issue affects Leaky Paywall: from n/a through 4.20.8.
Published: 2024-04-29T10:07:39.021Z
Updated: 2026-04-28T16:09:44.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39357 vulnerable 2026-06-08 05:33:50.134109 Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting
MEDIUM (5.5)
The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the ~/class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Published: 2021-10-21T19:38:30.480Z
Updated: 2025-02-14T17:55:12.748Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.