Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

scottpaterson vulnerabilities

13 published CVEs name scottpaterson among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-97661

    Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field

    scottpaterson · Business Essentials for Contact Form 7

    High7.2
  • CVE-2026-9189

    Contact Form 7 – PayPal & Stripe Add-on <= 2.4.9 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification)

    scottpaterson · Contact Form 7 – PayPal & Stripe Add-on

    Medium5.3
  • CVE-2025-12752

    Subscriptions & Memberships for PayPal <= 1.1.7 - Unauthenticated Fake Payment Creation

    scottpaterson · Subscriptions & Memberships for PayPal

    Medium5.3
  • CVE-2025-10701

    Time Clock – A WordPress Employee & Volunteer Time Clock Plugin <= 1.3.1 - Authenticated (Custom+) Stored Cross-Site Scripting

    scottpaterson · Time Clock – A WordPress Employee & Volunteer Time Clock Plugin

    Medium6.4
  • CVE-2024-13560

    Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion

    scottpaterson · Subscriptions & Memberships for PayPal

    Medium4.3
  • CVE-2024-13728

    Accept Donations with PayPal & Stripe <= 1.4.4 - Reflected Cross-Site Scripting

    scottpaterson · Accept Donations with PayPal & Stripe

    Medium6.1
  • CVE-2024-12423

    Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting

    scottpaterson · Business Essentials for Contact Form 7

    Medium6.1
  • CVE-2024-10685

    Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting

    scottpaterson · Business Essentials for Contact Form 7

    Medium6.1
  • CVE-2024-10683

    Contact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting

    scottpaterson · Contact Form 7 – PayPal & Stripe Add-on

    Medium6.1
  • CVE-2024-9593

    Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

    Scott Paterson · Time Clock Pro

    High8.3
All 13 in the list