Veille CVE

Recherche « Unknown Payment Button for PayPal »

3 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Payment Button for PayPal » ✕
  1. CVE-2026-90987 5.3 Moyenne

    Unknown Easy PayPal & Stripe Buy Now Button

    The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase.

  2. CVE-2026-88764 5.4 Moyenne

    Unknown Simple Membership

    The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while being granted a higher, more privileged membership level.

  3. CVE-2026-16990 5.3 Moyenne

    Unknown Payment Button for PayPal

    The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order against the merchant for an arbitrary lower amount.