What’s Vulnerable › Products

saadiqbal WP Easy Pay – Payment and Donation form Builder for Square vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your saadiqbal WP Easy Pay – Payment and Donation form Builder for Square version is affected

Latest saadiqbal WP Easy Pay – Payment and Donation form Builder for Square vulnerabilities

• CVE-2026-12739 — WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion (CVSS 4.3)
• CVE-2026-12738 — WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action (CVSS 4.3)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-5861 — WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection (CVSS 6.5)
• CVE-2023-1465 — WP EasyPay < 4.1 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2021-4411 — WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass (CVSS 4.3)
• CVE-2022-47177 — WordPress WP EasyPay Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)