Scott Paterson vulnerabilities
We track 7 vulnerabilities in Scott Paterson products across 6 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on May 4, 2026.
Latest Scott Paterson vulnerabilities
- 7.5 High severity
easy-paypal-events-tickets: Authorization Bypass Through User-Controlled Key
The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows unauthenticated attackers to enumerate and retrieve all customer order records. Attackers can
- 7.5 High severity
easy-paypal-events-tickets: Use of Hard-coded Credentials
Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality that allows unauthenticated remote attackers to bypass hash verification by supplying 'test' as
- 10.0 Critical severity
Easy Stripe: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson Easy Stripe easy-stripe allows Remote Code Inclusion.This issue affects Easy Stripe: from n/a through <= 1.1.
- 9.8 Critical severity
ScottCart: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Code Injection.This issue affects ScottCart: from n/a through <= 1.1.
- 8.3 High severity
Time Clock Pro: Improper Control of Generation of Code
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 (for Time Clock) and 1.1.4 (for Time Clock Pro) via the 'etimeclockwp_load_function_callback' function. This allows un
- 7.1 High severity
Contact Form 7 – PayPal & Stripe Add-on: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on contact-form-7-paypal-add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe A
- 8.8 High severity
Easy PayPal & Stripe Buy Now Button: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Easy PayPal & Stripe Buy Now Button.This issue affects Easy PayPal & Stripe Buy Now Button: from n/a through 1.8.1.