Scott Paterson

9 results · Clear filters · Feed

• High 7.2
  CVE-2026-97661

  Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field

  The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possibl…

  Scott Paterson Business Essentials for Contact Form 7 Web / CMS
  Oct 1, 2026
• High 7.1
  CVE-2026-65517

  WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

  Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.

  Scott Paterson Easy PayPal Buy Now Button
  Aug 6, 2026
• High 7.5
  CVE-2026-41471

  Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint

  The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows unauthenticated attackers to enumerate and retrieve all customer order records. Attackers ca…

  Scott Paterson easy-paypal-events-tickets Web / CMS
  May 4, 2026
• High 7.5
  CVE-2026-32834

  Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning

  Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying 'test' as…

  Scott Paterson easy-paypal-events-tickets Web / CMS
  May 4, 2026
• High 7.1
  CVE-2025-47517

  WordPress Accept Donations with PayPal plugin <= 1.4.5 - CSRF to Stored XSS vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affects Accept Donations with PayPal & Stripe: from n/a through <= 1.4.5.

  Scott Paterson Accept Donations with PayPal & Stripe
  May 7, 2025
• High 8.3
  CVE-2024-50492 Public exploit

  WordPress ScottCart plugin <= 1.1 - Remote Code Execution (RCE) vulnerability

  Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Code Injection.This issue affects ScottCart: from n/a through <= 1.1.

  Scott Paterson ScottCart
  Oct 28, 2024
• High 8.3
  CVE-2024-9593 Public exploit Scanner template EPSS 12%

  Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

  The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 (for Time Clock) and 1.1.4 (for Time Clock Pro) via the 'etimeclockwp_load_function_callback' function. This allows u…

  Scott Paterson Time Clock – A WordPress Employee & Volunteer Time Clock Plugin Time Clock Pro Web / CMS
  Oct 18, 2024
• High 7.1
  CVE-2024-48021

  WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on contact-form-7-paypal-add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe …

  Scott Paterson Contact Form 7 – PayPal & Stripe Add-on
  Oct 17, 2024
• High 7.1
  CVE-2024-29130

  WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0.

  Scott Paterson Contact Form 7 – PayPal & Stripe Add-on
  Mar 19, 2024