Skip to content
OpenAdvisories

Vendor

kendysond

5 known vulnerabilities.

Products

Payment Forms for Paystack 4 Selar.co Widget 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-66444

    WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability

    Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions.

    kendysond Payment Forms for Paystack
  • Medium 6.4
    CVE-2024-10894

    Payment Forms for Paystack <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes like 'datepicker', 'textarea', and 'text' in all versions up to, and including, 4.0.2 due to insufficient input sanitization and outpu…

    kendysond Payment Forms for Paystack Web / CMS
  • Medium 6.5
    CVE-2024-51598

    WordPress Selar.co Widget plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kendysond Selar.co Widget selar-co-widget allows DOM-Based XSS.This issue affects Selar.co Widget: from n/a through <= 1.2.

    kendysond Selar.co Widget
  • Medium 6.4
    CVE-2023-5665

    Payment Forms for Paystack <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. Th…

    kendysond Payment Forms for Paystack Web / CMS