CVE-2024-30527

WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.

We have discovered 49 live websites that are affected by CVE-2024-30527.

Run a Free Instant Scan



Affected Software

Product  Wp Express Checkout
Category Wordpress Plugins
Vulnerable Domains49 live websites (7.80% of Wp Express Checkout install base)
Vulnerable Versions
  • from 0 through 2.3.7
Vulnerable Versions Count13 versions ( 45% of all versions)


Common Weakness Enumeration

CWE-1284 Improper Validation of Specified Quantity in Input



Details

  • Published - May 17, 2024
  • Updated - Apr 28, 2026

Credits

  • Xinzhi Luo (Patchstack Alliance) (finder)

Website Distribution by Country

Number of websites using CVE-2024-30527
United States34 websites


Germany4 websites
GB2 websites
Italy2 websites
Belgium1 websites
Canada1 websites
Cyprus1 websites
France1 websites
Ireland1 websites
Mexico1 websites

Website Distribution by TLD

Number of websites using CVE-2024-30527
.com27 websites
.org10 websites
.de2 websites
.info2 websites
.it2 websites
.net2 websites
.eu1 websites
.org.uk1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-30527

Top websites that are affected by CVE-2024-30527. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.com United States*,***,***
***********.com United States*,***,***
**********.com United States*,***,***
*****.org United States*,***,***
***************.com France*,***,***
*************.com United States*,***,***
**************.com United States*,***,***
************.***.uk GB*,***,***
****************.net United States*,***,***
*************.org United States*,***,***
See full domain list

FAQ

CVE-2024-30527 is Improper Validation of Specified Quantity in Input in Wp Express Checkout
A total of 49 websites have been identified as vulnerable to CVE-2024-30527, based on global website indexing conducted by WebTechSurvey.
The Wp Express Checkout is affected by the CVE-2024-30527 vulnerability.
Wp Express Checkout versions up to and including 2.3.7 are vulnerable to CVE-2024-30527.