Skip to content
OpenAdvisories

Package · Packagist

sylius/paypal-plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.5
    CVE-2025-30152

    Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout

    The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. Prior to 1.6.2, 1.7.2, and 2.0.2, a discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment author…

    Sylius PayPalPlugin sylius/paypal-plugin Packagist
  • Medium 6.5
    CVE-2025-29788

    Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

    The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quant…

    Sylius PayPalPlugin sylius/paypal-plugin Packagist
  • High 7.5
    CVE-2021-41120

    Unauthorized access to Credit card form in sylius/paypal-plugin

    sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created with autoincremented payment id (/pay-with-paypal/{id}) and therefore it was easy to predict. The pro…

    Sylius PayPalPlugin sylius/paypal-plugin Packagist