CVE-2014-4559: Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Comme...

Security readout for executives and security teams

This CVE describes multiple cross-site scripting issues in a WordPress payment plugin file. A remote attacker could inject script or HTML through named parameters. Business urgency depends on whether the affected Swipe Checkout for WP e-Commerce plugin, version 3.1.0 or earlier, is installed and reachable. Likely exposure is limited to WordPress sites running Swipe Checkout for WP e-Commerce 3.1.0 or earlier with the vulnerable test-plugin.php reachable. The bundle does not provide CPEs or reliable product identifiers beyond the plugin name. Treat this as an exposure-verification task, not a confirmed crisis. If the plugin is present on public checkout infrastructure, prioritize removal, update research, or compensating controls because payment pages carry high trust and XSS can damage users and brand confidence. Mitigation focus: Inventory WordPress sites for the named plugin and version.; Check vendor or maintainer guidance for any fixed release or removal advice.; Disable or remove the plugin if it is present and no longer required..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.