WordPress Dreamfox Media Payment gateway per Product for Woocommerce plugin < 3.1.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Payment gateway per Product for Woocommerce plugin versions 3.1.6. Solution Update the WordPress Dreamfox Media Payment gateway per Product for Woocommerce plugin to the latest available version at least 3.1.6...

WordPress RecurWP – WordPress Recurly Payment Gateway plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress RecurWP – WordPress Recurly Payment Gateway plugin versions = 1.0.1. Solution No patched version available...

WordPress Payment Gateway Groups for WooCommerce plugin <= 1.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Payment Gateway Groups for WooCommerce plugin versions = 1.1.2. Solution Update the WordPress Payment Gateway Groups for WooCommerce plugin to the latest available version at least 1.1.3...

WordPress Choice Payment Gateway for WooCommerce plugin <= 2.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Choice Payment Gateway for WooCommerce plugin versions = 2.0.1. Solution Update the WordPress Choice Payment Gateway for WooCommerce plugin to the latest available version at least 2.0.2...

WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin <= 4.12.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin versions = 4.12.8. Solution Update the WordPress Ether and ERC20 tokens WooCommerce Payment Gateway plugin to the latest available version at least 4.12.9...

WordPress Authorize.Net Payment Gateway For WooCommerce plugin < 5.1.27 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Authorize.Net Payment Gateway For WooCommerce plugin versions 5.1.27. Solution Update the WordPress Authorize.Net Payment Gateway For WooCommerce plugin to the latest available version at least 5.1.27...

WordPress RecurWP – WordPress Recurly Payment Gateway plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress RecurWP – WordPress Recurly Payment Gateway plugin versions = 1.0.1. Solution No patched version available...

WordPress WooCommerce myghpay Payment Gateway plugin cross-site scripting vulnerability

The WooCommerce myghpay Payment Gateway plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the WordPress WooCommerce myghpay Payment Gateway plugin, which stems from /processresponse. php's clientref parameter lacks a data validation filter for...

CVE-2021-39308

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

CVE-2021-39308 WooCommerce myghpay Payment Gateway <= 3.0 Reflected Cross-Site Scripting

The WooCommerce myghpay Payment Gateway WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

CVE-2021-39308

Vulnerability summary (CVE-2021-39308) : The WordPress plugin “WooCommerce myghpay Payment Gateway” is vulnerable to Reflected Cross-Site Scripting via the clientref parameter in ~/processresponse.php, affecting versions up to 3.0. The issue can allow injection of arbitrary JavaScript in the clie...

WordPress myghpay WooCommerce Payment Gateway plugin <= 3.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress myghpay WooCommerce Payment Gateway plugin versions = 3.0. Solution Deactivate and delete. This plugin has been closed as of December 13, 2021 and is not available for download. This closure is temporary, pending a...

WooCommerce myghpay Payment Gateway <= 3.0 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the clientref parameter found in the /processresponse.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.0...

Important: Red Hat Security Advisory: Red Hat 3scale API Management 2.11.0 Release - Container Images

Red Hat 3scale API Management 2.11.0 Release - Container Images A security update for Red Hat 3scale API Management is now available from the Red Hat Container Catalog. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

CVE-2021-24679

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

Cardinity Payment Gateway for WooCommerce < 3.0.7 - Reflected Cross-Site Scripting

The plugin does not escape various parameter before outputting them in attributes, leading to Reflected Cross-Site Scripting issues PoC Vulnerable parameters: amount, country, currency, orderid, description, returnurl, projectid, signature...

Cross site scripting

The WooCommerce Payment Gateway Per Category WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /includes/pluginsettings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.10...

CVE-2021-38341

The CVE pertains to the WooCommerce Payment Gateway Per Category WordPress plugin (≤ 2.0.10) and describes a Reflected Cross‑Site Scripting flaw. The root cause is a reflected value in $_SERVER["PHP_SELF"] used by the plugin in includes/plugin_settings.php, enabling injection of arbitrary scripts...

CVE-2021-38341 WooCommerce Payment Gateway Per Category <= 2.0.10 Reflected Cross-Site Scripting

The WooCommerce Payment Gateway Per Category WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /includes/pluginsettings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.10...