Paypal vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Paypal products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 22 products.

6.1CVE-2017-6217paypaladaptive_payments_sdk
EPSS score
1.24%
paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution5.4CVE-2017-6213paypalphp_invoice_sdk
EPSS score
0.80%
paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.5.4CVE-2017-6215paypalphp_permissions_sdk
EPSS score
0.80%
paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.4.3CVE-2023-25026paypalpaypal brasil para woocommerce+1
EPSS score
0.56%
Missing Authorization vulnerability in PayPal PayPal Brasil para WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayPal Brasil para WooCommerce: from n/a through 1.4.2.3.6CVE-2006-0202paypalphp_toolkit
EPSS score
0.34%
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.5CVE-2006-0201paypalphp_toolkit
EPSS score
1.49%
Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log file via HTTP POST requests to ipn_success.php.