Payment forms, Buy now buttons, and Invoicing System | GetPaid vulnerabilities

2 known vulnerabilities in Payment forms, Buy now buttons, and Invoicing System | GetPaid from AyeCode. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Payment forms, Buy now buttons, and Invoicing…: Improper Validation of Specified Quantity in Input

  CVE-2026-119749Nov 4, 2026AyeCode

  The GetPaid plugin for WordPress before 2.8.63 contains an improper input validation vulnerability that allows unauthenticated attackers to bypass payment processing by submitting a negative item quantity on a public payment form. Attackers can exploit the unc

• 7.1 High severity

  Payment forms, Buy now buttons, and Invoicing…: Incorrect Authorization

  CVE-2026-119747Nov 4, 2026AyeCode

  The GetPaid plugin for WordPress before 2.8.63 contains an incorrect authorization vulnerability where the check_post_permissions() method in includes/api/class-getpaid-rest-posts-controller.php maps REST operations to generic WordPress post capabilities inste