Lucene search
K

18 matches found

Nuclei
Nuclei
added yesterday24 views

WordPress Payeezy Pay <=2.97 - Local File Inclusion

WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97...

9.8CVSS8.4AI score0.42918EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-45866

Malicious code in bioql PyPI...

8.6CVSS8.6AI score0.00384EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:9 a.m.2 views

CVE-2018-20985

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

9.8CVSS6.9AI score0.42918EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:12 p.m.5 views

CVE-2024-52371

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...

8.6CVSS7.2AI score0.00384EPSS
Exploits0References1
NVD
NVD
added 2024/11/14 6:15 p.m.9 views

CVE-2024-52371

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...

8.6CVSS0.00384EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/14 5:25 p.m.10 views

CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0...

8.6CVSS7.1AI score0.00384EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/14 5:25 p.m.27 views

CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...

8.6CVSS0.00384EPSS
Exploits0References1
CVE
CVE
added 2024/11/14 5:25 p.m.47 views

CVE-2024-52371

CVE-2024-52371 is a path traversal vulnerability in the WordPress plugin Global Gateway e4 | Payeezy Gateway (DonnellC) affecting versions n/a through 2.0. It stems from improper limitation of a pathname to a restricted directory and, per sources, can lead to arbitrary file deletion . Exploitatio...

8.6CVSS7.2AI score0.00384EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.1 views

WordPress plugin Global Gateway e4 | Payeezy Gateway 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A path traversal vulnerability exists in the WordPress plug...

8.6CVSS8.2AI score0.00384EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/11/11 7:2 a.m.2 views

WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Global Gateway e4 | Payeezy Gateway | versions = 2.0...

8.6CVSS7AI score0.00384EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/11 12:0 a.m.9 views

WordPress Global Gateway e4 | Payeezy Gateway | Plugin <= 2.0 is vulnerable to Arbitrary File Deletion

Software Global Gateway e4 | Payeezy Gateway | Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2024-52371 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 8614ac115bc9 Credits stealthcopter...

8.6CVSS6.8AI score0.00384EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2019/08/28 12:0 a.m.1 views

WordPress wp-payeezy-pay plugin input validation error vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. wp-payeezy-pay is an online secure payment form plugin used in it. An input validation error vulnerability...

9.8CVSS6.8AI score0.42918EPSS
Exploits0References1
NVD
NVD
added 2019/08/22 2:15 p.m.7 views

CVE-2018-20985

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

9.8CVSS9.3AI score0.42918EPSS
Exploits0References1
OSV
OSV
added 2019/08/22 2:15 p.m.0 views

CVE-2018-20985

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

9.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2019/08/22 1:34 p.m.59 views

CVE-2018-20985

CVE-2018-20985 affects the WordPress plugin WP Payeezy Pay (before 2.98). Multiple sources confirm a local file inclusion (LFI) vulnerability in pay.php, donate.php, donate-rec, and pay-rec, caused by insufficient input verification. The NVD entry describes LFI with potential partial/full confide...

9.8CVSS9.2AI score0.42918EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/22 1:34 p.m.9 views

CVE-2018-20985

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...

9.4AI score0.42918EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2018/12/07 12:0 a.m.20 views

WP Payeezy Pay < 2.98 - Local File Inclusion

The WP Payeezy Pay WordPress plugin was affected by a Local File Inclusion security vulnerability...

7.5CVSS1.9AI score0.42918EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2016/11/01 12:0 a.m.1 views

Wordpress plugin wp-payeezy-pay has multiple cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple cross-site scripting vulnerabilities exist in the Wordpress plugin wp-payeezy-pay. The program fails to filter user-supplied input, allowing an attacker to...

6.4AI score
Exploits0
Rows per page
Query Builder