PatchTheCVEwp easypay vulnerabilities and fixes
Recent CVEs affecting wp easypay, with upgrade or downgrade steps. 3 tracked.
Also searched as: wpeasypay.
wp easypay has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-07-24. Highest priority: CVE-2023-1465 (score 36/100).
- CVE-2024-5861 MEDIUM 5.3 UPGRADE The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datad
- CVE-2023-1465 MEDIUM 6.1 UPGRADE The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in
- CVE-2021-4411 MEDIUM 4.3 UPGRADE The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in vers
FAQ
How do I fix wp easypay vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp easypay being exploited right now?
None of the tracked wp easypay CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp easypay CVE should I patch first?
CVE-2023-1465 currently ranks highest (36/100): The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in .