Vulnerabilities > Tipsandtricks HQ > Wordpress Simple Paypal Shopping Cart > 4.6.2

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-27	CVE-2023-6497	Cross-site Scripting vulnerability in Tipsandtricks-Hq Wordpress Simple Paypal Shopping Cart The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automatic redirect URL setting in all versions up to and including 4.7.1 due to insufficient input sanitization and output escaping. network low complexity tipsandtricks-hq CWE-79	4.8
2023-03-16	CVE-2023-1431	Unspecified vulnerability in Tipsandtricks-Hq Wordpress Simple Paypal Shopping Cart The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location (/wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/). network low complexity tipsandtricks-hq	5.3

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.