EUVD-2026-120061

A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selectedids/ItemID leads to sql injection. It is possible to initiate t...

EUVD-2026-120054

A weakness has been identified in PipraPay 3.0.0. Affected by this vulnerability is the function hashhmac of the file pp-content/pp-include/pp-adapter.php of the component pp-token anti-CSRF Handler. Executing a manipulation can lead to hard-coded credentials. The attack may be performed from...

EUVD-2026-120049

A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted upload. The attack is...

CVE-2026-124624

A vulnerability exists in PipraPay 3.0.0 involving the pp-token anti-CSRF Handler component. Specifically, a weakness in the hash_hmac function within the file pp-content/pp-include/pp-adapter.php allows for a remote attack that can result in the disclosure of hard-coded credentials . While an ex...

CVE-2026-124625

A security vulnerability exists in PipraPay 3.0.0 within the Admin Panel component. Specifically, the deleteData function located in the file pp-content/pp-include/pp-functions.php is susceptible to SQL injection due to the improper handling of the selected_ids/ItemID argument. This vulnerability...

CVE-2026-124623

A security flaw in PipraPay 3.0.0 within the ZIP Archive Handler component allows for unrestricted upload via the system-settings-import function (located at /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import). This vulnerability can be exploited remotely through manipulation o...