Skip to content
OpenAdvisories
High · 7.5 CVE-2024-30527 EUVD-2024-28447GHSA-qvv7-6wf2-wr97

WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.

Affected products

VendorProductAffectedFixed
Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) ≤ 2.3.7 —

References