Filtered by vendor Scottpaterson Subscriptions
Filtered by product Subscriptions & Memberships For Paypal Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12752 2 Scottpaterson, Wordpress 2 Subscriptions & Memberships For Paypal, Wordpress 2025-11-24 5.3 Medium
The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create fake payment entries that have not actually occurred.