Lucene search
HistoryJan 01, 2024 - 3:15 p.m.
CVE-2023-6064
payhere payment gateway
log files
sensitive information
transactions
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.0%
The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.
Affected configurations
Node
payherepayhere_payment_gatewayRange<2.2.12wordpress
Related
prion
prion
Information disclosure
2024-01-01 15:15:00
wpvulndb
wpvulndb
PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
2023-12-08 00:00:00
cve
cve
CVE-2023-6064
2024-01-01 15:15:43
wpexploit
wpexploit
PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
2023-12-08 00:00:00
cvelist
cvelist
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.0%
Related for NVD:CVE-2023-6064