Lucene search
HistoryJul 19, 2024 - 6:15 a.m.
CVE-2024-6205
payplus
payment gateway
sql injection
woocommerce
api
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.013
Percentile
86.1%
The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.
Affected configurations
Node
paypluspayplus_payment_gatewayRange<6.6.9wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| payplus | payplus_payment_gateway | * | cpe:2.3:a:payplus:payplus_payment_gateway:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
CVE-2024-6205 PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi
2024-07-19 06:00:06
packetstorm
packetstorm
WordPress PayPlus Payment Gateway SQL Injection
2024-08-07 00:00:00
zdt
zdt
WordPress PayPlus Payment Gateway SQL Injection Exploit
2024-08-07 00:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Payplus Payplus Payment Gateway
2024-07-21 04:59:31
vulnrichment
vulnrichment
CVE-2024-6205 PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi
2024-07-19 06:00:06
cve
cve
CVE-2024-6205
2024-07-19 06:15:03
nuclei
nuclei
PayPlus Payment Gateway < 6.6.9 - SQL Injection
2024-07-19 18:36:26
wordfence
wordfence
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.013
Percentile
86.1%
Related for NVD:CVE-2024-6205