WordPress plugin
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High0
- Medium1
- Low0
All GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Arbitrary File Upload ≤1.4.13Update to 1.4.14 | CVE-2019-1010209 |
- Critical9.8Arbitrary File Upload
≤1.4.13Update to 1.4.14
GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership: common questions
Does GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership: 1 critical, 1 medium. At least one is not fixed in the latest version.
How do I check which version of GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership vulnerability?
CVE-2025-48102, published Sep 5, 2025: GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership <= 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership vulnerability listed in CISA KEV?
No. None of the known GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership vulnerabilities is currently listed in the CISA KEV catalog.