Login Request a demo
TI
Vendor
Tipsandtricks-hq
18 products with CVEs on record
78
CVEs
0
On KEV
0
New 30D
Products
WA
WP Affiliate Platform
Tipsandtricks-hq
7.1
11 CVEs0 on KEV0 new
AI
All IN One WP Security & Firewall
Tipsandtricks-hq
9.8
10 CVEs0 on KEV0 new
WE
WP Emember
Tipsandtricks-hq
8.8
10 CVEs0 on KEV0 new
SD
Simple Download Monitor
Tipsandtricks-hq
9.0
9 CVEs0 on KEV0 new
WE
WP Estore
Tipsandtricks-hq
8.8
8 CVEs0 on KEV0 new
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
6.5
7 CVEs0 on KEV0 new
CW
Compact WP Audio Player
Tipsandtricks-hq
6.5
4 CVEs0 on KEV0 new
AS
Accept Stripe
Tipsandtricks-hq
5.4
3 CVEs0 on KEV0 new
CS
Category Specific Rss Feed Subscription
Tipsandtricks-hq
8.8
3 CVEs0 on KEV0 new
SL
Software License Manager
Tipsandtricks-hq
8.8
3 CVEs0 on KEV0 new
WV
WP Video Lightbox
Tipsandtricks-hq
6.1
3 CVEs0 on KEV0 new
DV
Donations Via Paypal
Tipsandtricks-hq
4.8
1 CVEs0 on KEV0 new
EA
Easy Accept Payments For Paypal
Tipsandtricks-hq
5.4
1 CVEs0 on KEV0 new
FF
Far Future Expiry Header
Tipsandtricks-hq
4.3
1 CVEs0 on KEV0 new
SP
Simple Photo Gallery
Tipsandtricks-hq
9.8
1 CVEs0 on KEV0 new
WE
WP Express Checkout
Tipsandtricks-hq
4.8
1 CVEs0 on KEV0 new
WS
WP Security & Firewall
Tipsandtricks-hq
6.1
1 CVEs0 on KEV0 new
WS
WP Simple Adsense Insertion
Tipsandtricks-hq
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-3890
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
5.4
0%
May 1WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-3874
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
6.5
0%
May 1WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference
CVE-2025-3889
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
5.3
0%
May 1WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'
CVE-2024-10176
CW
Compact WP Audio Player
Tipsandtricks-hq
6.4
0%
Oct 24Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode
CVE-2024-6134
WE
WP Estore
Tipsandtricks-hq
5.4
0%
Aug 10WP eStore < 8.5.6 - Reflected XSS in Product Editing
CVE-2024-6136
WE
WP Estore
Tipsandtricks-hq
5.4
0%
Aug 9WP eStore < 8.5.6 - Settings Reset via CSRF
CVE-2024-6133
WE
WP Estore
Tipsandtricks-hq
6.5
0%
Aug 9WP eStore < 8.5.6 - Reflected XSS in Customer Search
CVE-2024-7353
AS
Accept Stripe
Tipsandtricks-hq
5.4
0%
Aug 7Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode
CVE-2024-5081
WE
WP Emember
Tipsandtricks-hq
6.1
0%
Aug 5WP eMember <= v10.7.0 - Stored XSS via CSRF
CVE-2024-5285
WA
WP Affiliate Platform
Tipsandtricks-hq
5.5
0%
Jul 29WP Affiliate Platform < 6.5.2 - Affiliate Deletion via CSRF
CVE-2024-6076
WE
WP Estore
Tipsandtricks-hq
6.1
0%
Jul 15WP eStore < 8.5.5 - Reflected XSS in Category Editing
CVE-2024-6075
WE
WP Estore
Tipsandtricks-hq
8.8
0%
Jul 15WP eStore < 8.5.5 - Coupon Deletion via CSRF
CVE-2024-6074
WE
WP Estore
Tipsandtricks-hq
6.1
0%
Jul 15WP eStore < 8.5.5 - Reflected XSS in Customer Editing
CVE-2024-6073
WE
WP Estore
Tipsandtricks-hq
6.1
0%
Jul 15WP eStore < 8.5.5 - Reflected XSS in Discount Editing
CVE-2024-6072
WE
WP Estore
Tipsandtricks-hq
6.1
0%
Jul 15WP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2024-5744
WE
WP Emember
Tipsandtricks-hq
6.8
0%
Jul 13WP eMember < 10.6.7 - Reflected XSS
CVE-2024-5715
WE
WP Emember
Tipsandtricks-hq
7.1
0%
Jul 13WP eMember < 10.6.7 - Reflected XSS via Member Edit
CVE-2024-5287
WA
WP Affiliate Platform
Tipsandtricks-hq
7.1
0%
Jul 13WP Affiliate Platform < 6.5.1 - Profile Update via CSRF
CVE-2024-5286
WA
WP Affiliate Platform
Tipsandtricks-hq
4.8
0%
Jul 13WP Affiliate Platform < 6.5.1 - Reflected XSS via Banner Editing
CVE-2024-5284
WA
WP Affiliate Platform
Tipsandtricks-hq
6.8
0%
Jul 13WP Affiliate Platform < 6.5.1 - Stored XSS via CSRF
CVE-2024-5283
WA
WP Affiliate Platform
Tipsandtricks-hq
6.1
0%
Jul 13WP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing
CVE-2024-5282
WA
WP Affiliate Platform
Tipsandtricks-hq
6.1
0%
Jul 13WP Affiliate Platform < 6.5.1 - Reflected XSS via Registration Form
CVE-2024-5281
WA
WP Affiliate Platform
Tipsandtricks-hq
6.1
0%
Jul 13WP Affiliate Platform < 6.5.1 - Reflected XSS via Affiliate Editing
CVE-2024-5280
WA
WP Affiliate Platform
Tipsandtricks-hq
4.7
0%
Jul 13WP Affiliate Platform < 6.5.1 - POST Reflected XSS
CVE-2024-5080
WE
WP Emember
Tipsandtricks-hq
8.8
1%
Jul 13WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
CVE-2024-5079
WE
WP Emember
Tipsandtricks-hq
6.1
0%
Jul 13WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration
CVE-2024-5077
WE
WP Emember
Tipsandtricks-hq
6.8
0%
Jul 13WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF
CVE-2024-5076
WE
WP Emember
Tipsandtricks-hq
8.8
0%
Jul 13WP eMember < 10.6.6 - Bulk Delete via CSRF
CVE-2024-5075
WE
WP Emember
Tipsandtricks-hq
5.9
0%
Jul 13WP eMember < 10.6.6 - Reflected XSS
CVE-2024-5074
WE
WP Emember
Tipsandtricks-hq
5.4
0%
Jul 13WP eMember < 10.6.6 - Reflected XSS
CVE-2023-48285
AS
Accept Stripe
Tipsandtricks-hq
5.3
0%
Jun 4WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability
CVE-2024-4749
WE
WP Emember
Tipsandtricks-hq
8.3
0%
Jun 4WP eMember < 10.3.9 - Reflected XSS
CVE-2023-6497
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
4.8
0%
Jan 27WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
CVE-2022-47588
SP
Simple Photo Gallery
Tipsandtricks-hq
9.8
1%
Nov 3WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection
CVE-2023-22685
CS
Category Specific Rss Feed Subscription
Tipsandtricks-hq
4.8
0%
May 12WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-22691
CS
Category Specific Rss Feed Subscription
Tipsandtricks-hq
8.8
0%
May 3WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-1469
WE
WP Express Checkout
Tipsandtricks-hq
4.8
0%
Mar 17The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to…
CVE-2023-1431
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
5.3
1%
Mar 16The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart…
CVE-2023-0275
EA
Easy Accept Payments For Paypal
Tipsandtricks-hq
5.4
1%
Feb 13Easy Accept Payments for PayPal < 4.9.10 - Contributor+ Stored XSS
CVE-2022-4542
CW
Compact WP Audio Player
Tipsandtricks-hq
5.4
0%
Jan 23Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS
CVE-2022-4672
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
5.4
1%
Jan 23WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode
CVE-2022-4465
WV
WP Video Lightbox
Tipsandtricks-hq
5.4
0%
Jan 16WP Video Lightbox < 1.9.7 - Contributor+ Stored XSS
CVE-2022-3898
WA
WP Affiliate Platform
Tipsandtricks-hq
6.5
0%
Nov 29WP Affiliate Platform <= 6.3.9 - Cross-Site Request Forgery
CVE-2022-3897
WA
WP Affiliate Platform
Tipsandtricks-hq
4.8
1%
Nov 29WP Affiliate Platform <= 6.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2022-3896
WA
WP Affiliate Platform
Tipsandtricks-hq
6.1
1%
Nov 29WP Affiliate Platform <= 6.3.9 - Reflected Cross-Site Scripting
CVE-2022-3822
DV
Donations Via Paypal
Tipsandtricks-hq
4.8
1%
Nov 28Donations via PayPal < 1.9.9 - Admin+ Stored XSS
CVE-2022-44737
AI
All IN One WP Security & Firewall
Tipsandtricks-hq
8.8
0%
Nov 22WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
CVE-2022-2189
WV
WP Video Lightbox
Tipsandtricks-hq
6.1
1%
Jul 25WP Video Lightbox < 1.9.5 - Reflected Cross-Site Scripting
CVE-2022-2194
AS
Accept Stripe
Tipsandtricks-hq
4.8
1%
Jul 17Accept Stripe Payments < 2.0.64 - Admin+ Stored Cross-Site Scripting
CVE-2022-1695
WS
WP Simple Adsense Insertion
Tipsandtricks-hq
4.3
0%
Jun 6WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
CVE-2021-25102
AI
All IN One WP Security & Firewall
Tipsandtricks-hq
4.7
1%
May 2All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site Scripting
CVE-2021-24692
SD
Simple Download Monitor
Tipsandtricks-hq
6.5
1%
Mar 14Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal
CVE-2021-24696
SD
Simple Download Monitor
Tipsandtricks-hq
8.8
1%
Jan 24Simple Download Monitor < 3.9.9 - Multiple CSRF
CVE-2021-24694
SD
Simple Download Monitor
Tipsandtricks-hq
5.4
1%
Jan 24Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes
CVE-2021-24698
SD
Simple Download Monitor
Tipsandtricks-hq
4.3
1%
Nov 8The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot…
CVE-2021-24697
SD
Simple Download Monitor
Tipsandtricks-hq
6.1
1%
Nov 8The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date POST parameters before…
CVE-2021-24695
SD
Simple Download Monitor
Tipsandtricks-hq
7.5
2%
Nov 8The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent…
CVE-2021-24693
SD
Simple Download Monitor
Tipsandtricks-hq
9.0
1%
Nov 8The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow users with a role as…
CVE-2021-24799
FF
Far Future Expiry Header
Tipsandtricks-hq
4.3
0%
Nov 1The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a…
CVE-2021-24735
CW
Compact WP Audio Player
Tipsandtricks-hq
6.5
1%
Oct 18The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous…