WordPress security by component

WP EasyPay

Plugin description

WP EasyPay is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: wp-easy-pay

Latest vulnerability

CVE-2026-57808: WP EasyPay: A security weakness

WP EasyPay is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 4.5.0.

PublishedJul 23, 2026

Known safe version4.5.1

		Safe version
Jul 23, 2026	CVE-2026-57808 WP EasyPay: A security weakness WP EasyPay is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 4.5.0.	4.5.1	CVE6.5 NVDPending
Jul 11, 2026	CVE-2026-12738 WP Easy Pay – Payment and Donation form Builder for Square: A security weakness WP Easy Pay – Payment and Donation form Builder for Square is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.5.0.	> 4.5.0	CVE4.3 NVDPending
Jun 18, 2026	CVE-2026-56024 WP EasyPay: Cross-site request forgery WP EasyPay is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 4.5.0.	> 4.5.0	CVE6.5 NVDPending
May 12, 2026	CVE-2026-45215 WP EasyPay: A security weakness WP EasyPay is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.3.0.	4.4.0	CVE5.3 NVDPending
Mar 16, 2026	CVE-2026-32587 WP EasyPay: A security weakness WP EasyPay is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVDPending
Jul 24, 2024	CVE-2024-5861 WP EasyPay – Square for: A security weakness WP EasyPay – Square for is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVD6.5
Jul 12, 2023	CVE-2021-4411 WP EasyPay – Square for: Cross-site request forgery WP EasyPay – Square for is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVDPending
May 25, 2023	CVE-2022-47177 Wp Easy Pay: Cross-site request forgery Wp Easy Pay is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD8.8