HIGH7.5Packagist
GHSA-25fx-mxc2-76g7· CVE-2021-41120Sylius PayPal Plugin allows unauthorized access to Credit card form, exposing payer name and not requiring 3DS
Modified: 7/8/2026
package
Packagist/sylius/paypal-plugin
pkg:packagist/sylius/paypal-plugin
MEDIUM6.5Packagist
GHSA-hxg4-65p5-9w37· CVE-2025-30152Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout
Modified: 9/10/2026
MEDIUM6.5Packagist
GHSA-pqq3-q84h-pj6x· CVE-2025-29788Sylius PayPal Plugin Payment Amount Manipulation Vulnerability
Modified: 9/10/2026