CVE-2024-30527 - CVE House
Back to Database
Status published High CVE-2024-30527

WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability

Vulnerability Description

Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-30527

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Xinzhi Luo (Patchstack Alliance)

References

More from Tips and Tricks HQ

View All →
CVE-2024-33591
WordPress Easy Accept Payments for PayPal plugin <= 4.9.10 - Broken Access Control vulnerability
High 7.5
CVE-2023-48285
WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability
Medium 5.3
CVE-2021-20782
Cross-site request forgery (CSRF) vulnerability in Software License Manager versions...
High 8.8
CVE-2020-5651
SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier...
High 8.8
CVE-2020-5650
Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier...
Medium 6.1

Affected Vendor

Tips and Tricks HQ

View all reports →

Affected Software

WP Express Checkout (Accept PayPal Payments)
Vulnerable Versions:
Unknown

Timeline

Official Publish: May 17th, 2024
Last Modified: April 28th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-1284

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.