Easy PayPal Shopping Cart
Easy PayPal Shopping Cart has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Easy PayPal Shopping Cart has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Ngô Thiên An (ancorn_). Easy PayPal Shopping Cart is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
Easy PayPal Shopping Cart <= 1.1.9 - Cross-Site Request Forgery to Cross-Site Scripting
Read the full analysisVulnerability Records
Easy PayPal Shopping Cart
Author
Scott Paterson
Overview This plugin will allow you to sell products or services on your website using an Add to Cart Button and View Cart Button. The Shopping Cart itself is hosted on PayPal. You can place a the Cart button anywhere on your site where you want to sell something. Your customers can use their PayPal account to pay for your products or services or they can pay by Debit or Credit Card. What makes this plugin powerful is its simplicity. You don’t have to spend days setting up an eCommerce Solution. Just install the plugin and in just a few minutes customers from around the world can start buying products or services from your website using PayPal. On the settings page of the plugin you will find clear instructions on how to sign up for a PayPal account if you don’t have one already. The plugin also provides instructions for how to setup a PayPal Sandbox account – which will allow you to setup a fake PayPal buyer and seller account (with fake money) so you can test everything before you start selling to the public. If you have any problems, questions, or issues please create a support request and we will get back to you quickly. This PayPal plugin works with any WordPress theme. WP Plugin is an offical PayPal Partner based in Boulder, Colorado. You can visit WP Plugins website at wpplugin.org. Various trademarks held by their respective owners. Easy PayPal Shopping Cart Features Button Inserter – Just enter your items name, price, etc. and it make the Cart button for you Works with any WordPress Theme Built in support for 18 languages Built in support 25 currencies PayPal testing through SandBox Choose 2 different PayPal button styles Choose how the PayPal window opens Choose your shop url Choose cancel payment url Choose succesful payment url Easy PayPal Shopping Cart Pro We offer a Pro version of this plugin for business owners who need more features. Charge Fixed Tax Charge Tax Rate Charge Shipping & Handling per item Apply a Fixed Discount per item Each Button Can Have Its Own Size Add a Custom Button Image You can learn more about the Pro version here. WP Plugin is an offical PayPal Partner. Various trademarks held by their respective owners.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C