CVE-2020-14092: Ithemes PayPal Pro

Critical severity, CVSS 9.8. EPSS: 94.5% chance of exploitation in the next 30 days.

The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.

Affected products

• Ithemes PayPal Pro: before 1.1.65 (fixed in 1.1.65)

Published 2020-07-02. Last modified 2026-06-17.