Medium · 5.4 CVE-2023-51683 EUVD-2023-56383GHSA-4rvh-837w-4r69

WordPress Easy PayPal Buy Now Button Plugin <= 1.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Scott Paterson Product: Easy PayPal & Stripe Buy Now Button

Description

Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Easy PayPal & Stripe Buy Now Button.This issue affects Easy PayPal & Stripe Buy Now Button: from n/a through 1.8.1.

Affected products

Vendor	Product	Affected	Fixed
Scott Paterson	Easy PayPal & Stripe Buy Now Button	≤ 1.8.1	—

References

https://patchstack.com/database/vulnerability/wp-ecommerce-paypal/wordpress-easy-paypal-stripe-buy-now-button-plugin-1-8-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry