CVE-2023-6064

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...

CVE-2023-6064 PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...

CVE-2023-6064 PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...

CVE-2023-6064

The PayHere Payment Gateway WordPress plugin contains an unauthenticated information-disclosure vulnerability in versions prior to 2.2.12. The root cause is the automatic creation of publicly accessible log files containing sensitive transaction data, leading to potential exposure of confidential...

PT-2024-14870 · WordPress · Payhere Payment Gateway

Name of the Vulnerable Software and Affected Versions: PayHere Payment Gateway WordPress plugin versions prior to 2.2.12 Description: The issue arises from the automatic creation of publicly-accessible log files containing sensitive information when transactions occur. This affects the PayHere...

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)

Software WooCommerce Stripe Payment Gateway Type Plugin Vulnerable versions = 7.6.1 Fixed in 7.6.2 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-51502 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID fccb1cf37427...

PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

Description The plugin automatically creates publicly-accessible log files containing sensitive information when transactions occur. https://www.suppliment.lk/wp-content/uploads/payhere-logs/?SD https://www.medic.lk/wp-content/uploads/payhere-logs/?SD...

PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

Description The plugin automatically creates publicly-accessible log files containing sensitive information when transactions occur. PoC https://www.suppliment.lk/wp-content/uploads/payhere-logs/?SD https://www.medic.lk/wp-content/uploads/payhere-logs/?SD...

CVE-2022-45362

Server-Side Request Forgery SSRF vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0...

CVE-2022-45362

Server-Side Request Forgery SSRF vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0...

CVE-2022-45362

CVE-2022-45362 affects the WordPress Paytm Payment Gateway plugin up to version 2.7.0. The Nuclei template documents a server-side request forgery (SSRF) vulnerability allowing an attacker to cause the site to make requests to arbitrary domains, potentially exposing data or enabling unauthorized ...

CVE-2022-45362 WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0...

WordPress Plugin Paytm Payment Gateway Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2023-14651 · Paytm · Paytm Payment Gateway

Name of the Vulnerable Software and Affected Versions: Paytm Payment Gateway versions n/a through 2.7.0 Description: A Server-Side Request Forgery SSRF issue affects the Paytm Payment Gateway. This issue allows an attacker to forge requests to the server, potentially leading to unauthorized acces...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

CVE-2023-48737 WordPress TriPay Payment Gateway Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

CVE-2023-48737

CVE-2023-48737 refers to a Cross-Site Scripting (XSS) vulnerability in the TriPay Payment Gateway WordPress plugin. Affected: TriPay Payment Gateway versions up to and including 3.2.7. Root cause: improper neutralization of input during web page generation leading to stored XSS. Impact per source...

CVE-2023-48737 WordPress TriPay Payment Gateway Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7...

PT-2023-30929 · Unknown · Tripay Payment Gateway

Name of the Vulnerable Software and Affected Versions: TriPay Payment Gateway versions 3.2.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...