Wpplugin
3 CVEs tracked since 2021. Since Nov 2021, none of them reached CISA KEV.
Wpplugin CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-11 | 3 | 0 |
| 2021-12 | 2 or fewer | |
| 2022-01 | 2 or fewer | |
| 2022-02 | 2 or fewer | |
| 2022-03 | 3 or fewer | |
| 2022-04 | 3 or fewer | |
| 2022-05 | 3 or fewer | |
| 2022-06 | 3 or fewer | |
| 2022-07 | 3 or fewer | |
| 2022-08 | 3 or fewer | |
| 2022-09 | 3 or fewer | |
| 2022-10 | 2 or fewer | |
| 2022-11 | 3 or fewer | |
| 2022-12 | 3 or fewer | |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 3 or fewer | |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Wpplugin's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Wpplugin.
- CVE-2025-47623WordPress Easy PayPal Buy Now Button plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability5.9
- CVE-2025-47517WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability7.1
- CVE-2024-10685Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting6.1
- CVE-2024-10683Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting6.1
- CVE-2024-50492WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability8.3
- CVE-2024-9593Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution8.3
- CVE-2024-8476Easy PayPal Events <= 1.2.1 - Cross-Site Request Forgery to Arbitrary Post Deletion4.3
- CVE-2024-29130WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2023-51683WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4
- CVE-2024-1719Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update4.3
- CVE-2023-47239WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)6.5
- CVE-2023-24405WordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4
- CVE-2023-24395WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4
- CVE-2022-4628Easy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode5.4
- CVE-2021-24989Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF6.5
The record
- Peak rank
- #166 in Nov 2021
- Busiest month shown
- Nov 2021, 3 CVEs
- Months with a KEV entry
- 0 since Nov 2021
- Monthly snapshots
- 1 since 2021