WordPress PayPlus Payment Gateway Plugin <= 6.6.8 is vulnerable to SQL Injection

Software PayPlus Payment Gateway Type Plugin Vulnerable versions = 6.6.8 Fixed in 6.6.9 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-6205 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 47e962c92ffc Credits Project Black Required privilege...

WordPress PayPlus Payment Gateway plugin <= 6.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin PayPlus Payment Gateway versions = 6.6.8...

WordPress PayPlus Payment Gateway Plugin <= 6.6.8 is vulnerable to Cross Site Scripting (XSS)

Software PayPlus Payment Gateway Type Plugin Vulnerable versions = 6.6.8 Fixed in 6.6.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37459 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3897da93b46e Credits Le Ngoc Anh Required...

PAYplus - Customized SSL, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application PAYplus published at the 'play' market has multiple vulnerabilities...