Donation Block For PayPal

Donation Block For PayPal has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

Every one of the 3 issues recorded for Donation Block For PayPal has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Donation Block For PayPal is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Donation Block For PayPal vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-6021

Donation Block For PayPal <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-01-07 00:00	Donation Block For PayPal <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Donation Block For PayPal <= 2.2.0	`CVE-2025-22525`	6.4 Medium	zaim	Yes
2024-07-09 00:00	Donation Block For PayPal <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting Donation Block For PayPal <= 2.1.0	`CVE-2024-6021`	7.2 High	Bob Matyas	Yes
2023-02-01 00:00	Donation Block For PayPal <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Donation Block For PayPal <= 2.0.0	`CVE-2023-0535`	6.4 Medium	István Márton	Yes

Showing 1–3 of 3 reports

Latestv2.3.1

Donation Block For PayPal

Author

Bharat Kambariya

4.3(4)

86/100

Last Updated

2025-05-11 (1y ago)

Active Installs

600+

Downloads

36,317

Requires WP

5.0+

Requires PHP

5.2.4+

Tested up to

WP 6.7.7

Created

2019-04-19 (8y ago)

Paypal donation block allows you to create dynamic PayPal Donation Buttons quickly and in a very easy way on your website. Watch this 1 minute video of how the plugin works: Plugin Functionality: Sandbox/Live Mode Dynamic Amount of Donation All Currencies available Dynamic Button Size Dynamic Description Donation Record Page Donation Setting Page Donation Success/Failed Page Shortcode can be used in code too. Shortcode [paypal_donation_block email ='yourpaypalemail@example.com' amount ='10' currency='USD' purpose='Charity for Child Health Care' mode='sandbox' suggestion='1, 5, 10, 20, 50, 100' ] <?php echo do_shortcode('[paypal_donation_block]'); ?> Currency Codes ‘AUD’ => ‘Australian Dollars (A $)’ ‘BRL’ => ‘Brazilian Real’ ‘CAD’ => ‘Canadian Dollars (C $)’ ‘CZK’ => ‘Czech Koruna’ ‘DKK’ => ‘Danish Krone’ ‘EUR’ => ‘Euros (€)’, ‘HKD’ => ‘Hong Kong Dollar ($)’ ‘HUF’ => ‘Hungarian Forint’ ‘ILS’ => ‘Israeli New Shekel’ ‘JPY’ => ‘Yen (¥)’ ‘MYR’ => ‘Malaysian Ringgit’ ‘MXN’ => ‘Mexican Peso’ ‘NOK’ => ‘Norwegian Krone’ ‘NZD’ => ‘New Zealand Dollar ($)’ ‘PHP’ => ‘Philippine Peso’ ‘PLN’ => ‘Polish Zloty’ ‘GBP’ => ‘Pounds Sterling (£)’ ‘RUB’ => ‘Russian Ruble’ ‘SGD’ => ‘Singapore Dollar ($)’ ‘SEK’ => ‘Swedish Krona’ ‘CHF’ => ‘Swiss Franc’ ‘TWD’ => ‘Taiwan New Dollar’ ‘THB’ => ‘Thai Baht’ ‘TRY’ => ‘Turkish Lira’ ‘USD’ => ‘US Dollars’

View on WordPress.org