Skip to content
OpenAdvisories

Vendor

mra13

19 known vulnerabilities.

Products

Simple Shopping Cart 8 Simple Download Monitor 4 Accept Stripe Payments 2 Stripe Payments 2 Compact WP Audio Player 2 WP Express Checkout (Accept PayPal Payments Easily) 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.1
    CVE-2026-78282

    WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.

    mra13 Stripe Payments
  • High 8.2
    CVE-2025-3529

    WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter

    The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitiv…

    mra13 Simple Shopping Cart Web / CMS
  • High 7.5
    CVE-2025-3530

    WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation

    The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plu…

    mra13 Simple Shopping Cart Web / CMS
  • High 7.6
    CVE-2025-24663

    WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through <= 3.9.25.

    mra13 Simple Download Monitor
  • High 8.2
    CVE-2023-48286

    WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability

    Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through <= 2.0.79.

    mra13 Stripe Payments