https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-27460.htmlhttps://patchthecve.com/cve/CVE-2023-27460.htmlWed, 17 Jun 2026 05:45:15 +0000MEDIUM 4.3: Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a through 1.3.34.https://patchthecve.com/cve/CVE-2019-14784.htmlhttps://patchthecve.com/cve/CVE-2019-14784.htmlWed, 17 Jun 2026 02:19:00 +0000MEDIUM 6.1: The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.https://patchthecve.com/cve/CVE-2019-14785.htmlhttps://patchthecve.com/cve/CVE-2019-14785.htmlWed, 17 Jun 2026 02:19:00 +0000MEDIUM 5.4: The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cp_contact_form_paypal.php&pwizard=1 cp_contactformpp_id parameter.https://patchthecve.com/cve/CVE-2015-9234.htmlhttps://patchthecve.com/cve/CVE-2015-9234.htmlWed, 17 Jun 2026 00:36:06 +0000HIGH 7.2: The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php.https://patchthecve.com/cve/CVE-2015-9233.htmlhttps://patchthecve.com/cve/CVE-2015-9233.htmlWed, 17 Jun 2026 00:36:06 +0000HIGH 8.8: The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php.