MR
Vendor
mra13
20
CVEs
0
On KEV
0
New 30D
Products
SS8.2
Simple Shopping Cart
mra13
8 CVEs0 on KEV0 new
SD7.6
Simple Download Monitor
mra13
4 CVEs0 on KEV0 new
AS6.4
Accept Stripe Payments
mra13
2 CVEs0 on KEV0 new
CW6.4
Compact WP Audio Player
mra13
2 CVEs0 on KEV0 new
SP8.2
Stripe Payments
mra13
2 CVEs0 on KEV0 new
SM7.5
Simple Membership
Mra13
1 CVEs0 on KEV0 new
WE4.8
WP Express Checkout (Accept PayPal Payments Easily)
mra13
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-78282 | SP Stripe Payments mra13 | 7.1 | Aug 24 | WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2021-47983 | AS Accept Stripe Payments mra13 | 6.4 | Jun 8 | WordPress Plugin Stripe Payments < 2.0.40 Stored XSS via currency_code |
| CVE-2026-0552 | SS Simple Shopping Cart mra13 | 6.4 | Apr 4 | Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode |
| CVE-2026-2383 | SD Simple Download Monitor mra13 | 6.4 | Feb 27 | Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field |
| CVE-2025-8977 | SD Simple Download Monitor mra13 | 6.5 | Aug 28 | Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality |
| CVE-2025-58197 | SD Simple Download Monitor mra13 | 6.5 | Aug 27 | WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-3890 | SS Simple Shopping Cart mra13 | 5.4 | May 1 | WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2025-3874 | SS Simple Shopping Cart mra13 | 6.5 | May 1 | WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference |
| CVE-2025-3889 | SS Simple Shopping Cart mra13 | 5.3 | May 1 | WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' |
| CVE-2025-3530 | SS Simple Shopping Cart mra13 | 7.5 | Apr 23 | WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation |
| CVE-2025-3529 | SS Simple Shopping Cart mra13 | 8.2 | Apr 23 | WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter |
| CVE-2025-24663 | SD Simple Download Monitor mra13 | 7.6 | Jan 24 | WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability |
| CVE-2024-56279 | CW Compact WP Audio Player mra13 | 6.4 | Jan 7 | WordPress Compact WP Audio Player plugin <= 1.9.14 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2024-12622 | SS Simple Shopping Cart mra13 | 6.4 | Dec 24 | WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2023-48286 | SP Stripe Payments mra13 | 8.2 | Dec 9 | WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability |
| CVE-2024-11088 | SM Simple Membership Mra13 | 7.5 | Nov 21 | Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor |
| CVE-2024-10176 | CW Compact WP Audio Player mra13 | 6.4 | Oct 24 | Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode |
| CVE-2024-7353 | AS Accept Stripe Payments mra13 | 5.4 | Aug 7 | Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode |
| CVE-2023-6497 | SS Simple Shopping Cart mra13 | 4.8 | Jan 27 | WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting |
| CVE-2023-1469 | WE WP Express Checkout (Accept PayPal Payments Easily) mra13 | 4.8 | Mar 17 | The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to… |