Fullworksplugins Quick Paypal Payments — known CVE vulnerabilities

Every CVE whose affected-product data names Fullworksplugins Quick Paypal Payments, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-25713 — CVSS 7.1 (high): Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
• CVE-2023-23889 — CVSS 6.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
• CVE-2023-25702 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
• CVE-2023-1554 — CVSS 4.8 (medium): The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high…