GCVE - cpe:2.3:a:wpmanageninja:best_payments_plugin_for

Approved changes feed: RSS · Atom

cpe:2.3:a:wpmanageninja:best_payments_plugin_for_wp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wpmanageninja (`5cded9dc-417a-5fad-ad09-b49995903cbc`)
Product	Best Payments Plugin For Wp (`e80d5bdf-68c7-5fe2-8a2e-5e1a468c2fc1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-108484`	vulnerable	2026-11-03 10:18:01.460276	WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27. Published: 2026-10-14T18:09:35.659Z Updated: 2026-10-15T16:43:45.622Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wp-payment-form/vulnerability/wordpress-best-payments-plugin-for-wp-plugin-4-6-27-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-42655`	vulnerable	2026-07-29 00:49:32.132137	WordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerability HIGH (7.5) Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. Published: 2026-06-15T20:18:38.573Z Updated: 2026-06-15T22:30:46.983Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wp-payment-form/vulnerability/wordpress-best-payments-plugin-for-wp-plugin-4-6-19-payment-bypass-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.