Log out
Get PRO

Latest

Input validation vulnerability in Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP 4.2.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 10, 2022

The Simple Payment Donations plugin for WordPress has a vulnerability that makes it possible for unauthenticated attackers to inject malicious code into pages. This happens when the plugin does not properly sanitize input or escape output. The vulnerability is present in all versions up to and including version 4.2.0. To avoid this, users must be careful when clicking on links or performing any other actions.

Detected in:

Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management fixed vulnerable versions:
Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP fixed vulnerable versions: >= * <= 4.2.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.