CVE-2014-4559: Cybercompay Swipehq-Payment-Gateway-Wp-E-Commerce

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) api_key, (2) payment_page_url, (3) merchant_id, (4) api_url, or (5) currency parameter.

Affected products

• Cybercompay Swipehq-Payment-Gateway-Wp-E-Commerce: up to and including 3.1.0

Published 2019-12-27. Last modified 2026-06-17.