WordPress plugin
Online Payments – Get Paid with PayPal, Square & Stripe security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium4
- Low0
All Online Payments – Get Paid with PayPal, Square & Stripe vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.20.0Update to 3.30.0 | CVE-2024-11895 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.20.0Update to 3.30.0 | CVE-2025-22661 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.3.1Update to 1.4.0 | CVE-2023-2406 | |
| Medium6.1 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤1.3.1No patch available | CVE-2023-2407 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.20.0Update to 3.30.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.20.0Update to 3.30.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.3.1Update to 1.4.0
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.3.1No patch available
Online Payments – Get Paid with PayPal, Square & Stripe: common questions
Does Online Payments – Get Paid with PayPal, Square & Stripe have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Online Payments – Get Paid with PayPal, Square & Stripe: 4 medium. At least one is not fixed in the latest version.
How do I check which version of Online Payments – Get Paid with PayPal, Square & Stripe I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Online Payments – Get Paid with PayPal, Square & Stripe vulnerability?
CVE-2024-11895, published Feb 17, 2025: Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Online Payments – Get Paid with PayPal, Square & Stripe vulnerability listed in CISA KEV?
No. None of the known Online Payments – Get Paid with PayPal, Square & Stripe vulnerabilities is currently listed in the CISA KEV catalog.