Product
The GetPaid plugin for WordPress contains a Stored Cross-Site Scripting vulnerability in the mmdwqzpoxadd parameter, allowing unauthenticated attackers to execute arbitrary scripts in an administrator's browser.