Approved changes feed: RSS · Atom

cpe:2.3:a:wpeasypay:wp_easypay:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpeasypay (2e2b0959-64a2-562c-9f7a-546147982d3d)
ProductWp Easypay (2de3bdc9-7f69-58b3-add2-db9eb4adc10d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5861 vulnerable 2026-06-08 06:56:17.638611 WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection
MEDIUM (5.3)
The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the wpep_square_disconnect() function in all versions up to, and including, 4.2.3. This makes it possible for unauthenticated attackers to disconnect square.
Published: 2024-07-24T03:17:16.440Z
Updated: 2026-04-08T16:49:20.972Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.