18 matches found
WordPress Payeezy Pay <=2.97 - Local File Inclusion
WordPress Plugin WP Payeezy Pay is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Payeezy Pay version 2.97...
EUVD-2024-45866
Malicious code in bioql PyPI...
CVE-2018-20985
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
CVE-2024-52371
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...
CVE-2024-52371
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...
CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway.This issue affects Global Gateway e4 | Payeezy Gateway: from n/a through 2.0...
CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through = 2.0...
CVE-2024-52371
CVE-2024-52371 is a path traversal vulnerability in the WordPress plugin Global Gateway e4 | Payeezy Gateway (DonnellC) affecting versions n/a through 2.0. It stems from improper limitation of a pathname to a restricted directory and, per sources, can lead to arbitrary file deletion . Exploitatio...
WordPress plugin Global Gateway e4 | Payeezy Gateway 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A path traversal vulnerability exists in the WordPress plug...
WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Global Gateway e4 | Payeezy Gateway | versions = 2.0...
WordPress Global Gateway e4 | Payeezy Gateway | Plugin <= 2.0 is vulnerable to Arbitrary File Deletion
Software Global Gateway e4 | Payeezy Gateway | Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Deletion CVE CVE-2024-52371 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 8614ac115bc9 Credits stealthcopter...
WordPress wp-payeezy-pay plugin input validation error vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. wp-payeezy-pay is an online secure payment form plugin used in it. An input validation error vulnerability...
CVE-2018-20985
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
CVE-2018-20985
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
CVE-2018-20985
CVE-2018-20985 affects the WordPress plugin WP Payeezy Pay (before 2.98). Multiple sources confirm a local file inclusion (LFI) vulnerability in pay.php, donate.php, donate-rec, and pay-rec, caused by insufficient input verification. The NVD entry describes LFI with potential partial/full confide...
CVE-2018-20985
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
WP Payeezy Pay < 2.98 - Local File Inclusion
The WP Payeezy Pay WordPress plugin was affected by a Local File Inclusion security vulnerability...
Wordpress plugin wp-payeezy-pay has multiple cross-site scripting vulnerabilities
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple cross-site scripting vulnerabilities exist in the Wordpress plugin wp-payeezy-pay. The program fails to filter user-supplied input, allowing an attacker to...