Online Payments – Get Paid with PayPal, Square & Stripe
Online Payments – Get Paid with PayPal, Square & Stripe has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 4 issues recorded for Online Payments – Get Paid with PayPal, Square & Stripe has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Jonas Höbenreich. Online Payments – Get Paid with PayPal, Square & Stripe is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-11895Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Online Payments – Get Paid with PayPal, Square & Stripe
Author
vcita
Online Payments is a simple and secure WordPress plugin, enabling your clients to make payments with a click of a button. Key features of Online Payments plugin: Process unlimited amounts every month Add as many payment buttons to your site pages & posts Customize the payment button to perfectly match your website theme and design Accept payments using your preferred payment gateway – Paypal, Stripe or Square Set your preferred currency from 26 supported currencies Enable fast checkout to your clients with vcita’s secured card on file feature Automatically send thank you email with every successful payment Get notified automatically with every successful payment Get notified of late payment and send reminders to clients Issue invoices and email them to clients with an invitation to pay online Integrate vCita with QuickBooks or other accounting & billing services via Zapier Specify a price and description for your product or let your client manually fill on checkout Ask the client to add any type of data you want on checkout Charge clients’ credit cards directly from your dashboard Keep track of all your billing activity & payments. You can also export it to CSV file FREE 14 DAYS TRIAL. No credit card needed
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C