28 matches found
CVE-2026-93620
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620
The PayPlus Payment Gateway WordPress plugin, in versions
EUVD-2026-85463
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by mamgad in WordPress Plugin PayPlus Payment Gateway versions = 8.2.5...
CVE-2026-93620: Missing Authorization
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
PT-2026-97448
Name of the Vulnerable Software and Affected Versions PayPlus Payment Gateway versions prior to 8.2.6 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 8.2.5...
CVE-2026-12973
The PayPlus Payment Gateway WordPress plugin, in versions before 8.2.2 , contains a vulnerability where it fails to perform authorization or order-ownership validation for a specific AJAX action . This flaw is accessible to unauthenticated users , potentially allowing them to disclose the secret ...
EUVD-2026-45887
The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to disclose the secret order key of arbitrary WooCommerce orders and, under some configurations, to...
CVE-2026-12973: Missing Authorization
The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to disclose the secret order key of arbitrary WooCommerce orders and, under some configurations, to...
CVE-2026-12972: Improper Access Control
The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation in one of its AJAX actions available to unauthenticated users, allowing them to tamper with the payment-related metadata of arbitrary WooCommerce orders...
EUVD-2024-36763
Malicious code in bioql PyPI...
CVE-2024-37564
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PayPlus LTD PayPlus Payment Gateway.This issue affects PayPlus Payment Gateway: from n/a through 7.0.7...
CVE-2024-37459
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...
CVE-2024-37459
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...
Exploit for SQL Injection in Payplus Payplus_Payment_Gateway
CVE-2024-6205 pip install requests This is a...
PT-2024-27569 · Unknown · Payplus Payment Gateway
Name of the Vulnerable Software and Affected Versions: PayPlus Payment Gateway versions n/a through 6.6.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...
CVE-2024-37459: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...