5 matches found
CVE-2025-31032
Cross-Site Request Forgery CSRF vulnerability in Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway pagopar-woocommerce-gateway allows Stored XSS.This issue affects Pagopar – WooCommerce Gateway: from n/a through = 2.7.1...
CVE-2025-31032
creationtimestamp| type| source ---|---|--- 2025-04-09 16:48:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11120...
CVE-2025-31032
CVE-2025-31032 affects the Pagopar – WooCommerce Gateway (WordPress plugin) and is described as a Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in versions up to 2.7.1. The CVSS score is 7.1 (HIGH) with network attack vector, no privileges, user interaction requir...
CVE-2025-31032 WordPress Pagopar – WooCommerce Gateway plugin <= 2.7.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway pagopar-woocommerce-gateway allows Stored XSS.This issue affects Pagopar – WooCommerce Gateway: from n/a through = 2.7.1...
CVE-2025-31032 WordPress Pagopar – WooCommerce Gateway plugin <= 2.7.1 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway pagopar-woocommerce-gateway allows Stored XSS.This issue affects Pagopar – WooCommerce Gateway: from n/a through = 2.7.1...