Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.7

Easy PayPal Buy Now Button Redirects to Untrusted Sites

CVE-2024-43236 · published 2 years ago
Summary

The Easy PayPal Buy Now Button may redirect users to untrusted sites, potentially allowing attackers to trick users into revealing sensitive information. This issue affects versions 1.0 through 1.9 of the plugin. Update to the latest version to fix this vulnerability.

Original advisory text
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issue affects Easy PayPal Buy Now Button: from n/a through 1.9.
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issue affects Easy PayPal Buy Now Button: from n/a through 1.9.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.7 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-601Open Redirect
Timeline
Published19 Aug 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-43236 · NVD
Track software like this
Free during beta