Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-4514

Cross-site scripting (XSS) vulnerability in includes/api_tenpay/inc.tenpay_notify.php in the Alipay plugin 3.6.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to the getDebugInfo function.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Alipay Project
Products
Alipay
CVE-2021-24390

Alipay <= 3.7.2 - Authenticated SQL Injection

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed
Vendors
Alipay Project
Products
Alipay