Skip to content
OpenAdvisories

Vendor

Tips and Tricks HQ

13 known vulnerabilities.

Products

WP eMember 4 WP Affiliate Platform 3 Simple Download Monitor 2 Software License Manager 1 Easy Accept Payments 1 WP Express Checkout (Accept PayPal Payments) 1 Stripe Payments 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28073

    WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2.

    Tips and Tricks HQ WP eMember
  • High 7.5
    CVE-2024-30527

    WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.

    Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments)
  • High 7.5
    CVE-2024-33591

    WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments.This issue affects Easy Accept Payments: from n/a through 4.9.10.

    Tips and Tricks HQ Easy Accept Payments
  • High 8.8
    CVE-2022-3898

    WP Affiliate Platform <= 6.3.9 - Cross-Site Request Forgery

    The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.9. This is due to missing or incorrect nonce validation on various functions including the affiliates_menu method. This makes it p…

    Tips and Tricks HQ WP Affiliate Platform Web / CMS