Checkout for PayPal

Checkout for PayPal has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Missing Authorization.

Every one of the 4 issues recorded for Checkout for PayPal has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Muhammad Yudha - DJ. Checkout for PayPal is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Checkout for PayPal vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-39572

Checkout for PayPal <= 1.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
Checkout for PayPal banner
Latestv1.0.47

Checkout for PayPal

Noor Alam

Author

Noor Alam

4.4(7)
88/100
Last Updated
2026-05-26 (4mo ago)
Active Installs
600+
Downloads
59,998
Requires WP
5.5+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2020-11-10 (6y ago)

Checkout for PayPal is a lightweight and powerful WordPress plugin that lets you easily accept PayPal payments directly on your website using the PayPal Checkout API. No coding required — just install, add your PayPal account API credentials, and start receiving payments securely in minutes. This plugin is perfect for eCommerce stores, donation pages, and product sales. You can even use it alongside e-commerce plugins like WooCommerce without conflicts. Checkout for PayPal Add-ons Variable Price Dynamic Buttons Contact Form 7 Integration Order Export Features Seamless PayPal Checkout – Integrates directly with the official PayPal Checkout API for secure transactions. One-Click Payments – Customers can pay instantly using PayPal balance, credit, or debit card. Mobile-Optimized – Works flawlessly on smartphones, tablets, and desktops. Shortcode Support – Add PayPal payment buttons anywhere on your site. Custom Amounts – Accept fixed or variable payment amounts using Variable Price add-on. No Monthly Fees – Pay only PayPal’s standard transaction fees. eCommerce Stores – Sell products or services without a complicated shopping cart. Donations – Collect contributions for charities, fundraisers, or personal causes Freelancers & Consultants – Accept project payments online. How to Create a PayPal Checkout Button In order to create a PayPal Checkout Button insert the shortcode like the following: [checkout_for_paypal item_description="My cool product" amount="1.00"] Replace the values with your item description and amount. Note: The content of the button (e.g. name, price) is rendered in HTML and can be altered before checkout. Elementor Page Builder Integration Create a new page or Edit with Elementor. From Widgets (Under Elements) select Shortcode. Enter the Checkout for PayPal shortcode. Click Apply to update changes to page. Click Publish. Documentation https://noorsplugin.com/checkout-for-paypal-wordpress-plugin/ Translation If you are a non-English speaker please help translate Checkout for PayPal into your language. Note: This is NOT an official PayPal product.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C