VYPR

Wp Express Checkout

by Tipsandtricks Hq

CVEs (1)

  • CVE-2023-1469MedMar 17, 2023
    risk 0.29cvss 4.4epss 0.00

    The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…