CVE-2024-35676

MEDIO 5.4CVE-2024-35676 · Published 08/06/2024 · updated 17/06/2026

En resumen

CVE-2024-35676 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a recurring paypal donations (wp-ecommerce).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.25%, mayor que el 17.1% de las vulnerabilidades.
Solución: actualizar a 1.8 o posterior.

Package	Affected versions	Patched versions
recurring paypal donations wp-ecommerce	`< 1.8`	`1.8`

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpecommerce Recurring PayPal Donations allows Stored XSS.This issue affects Recurring PayPal Donations: from n/a through 1.7.

References

patchstack.com/database/vulnerability/recurring-donation/wordpress-recurring-paypal-donations-plugin-1-7-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free