Lucene search
+L

1009 matches found

Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•18 views

PT-2025-39038

Name of the Vulnerable Software and Affected Versions Payrexx Payment Gateway for WooCommerce versions through 3.1.5 Description A missing authorization issue exists in Payrexx Payment Gateway for WooCommerce, allowing exploitation due to incorrectly configured access control security levels...

4.3CVSS6.6AI score0.00246EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•15 views

WordPress plugin CardCom Payment Gateway 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00277EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•21 views

WordPress plugin Payrexx Payment Gateway for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00246EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•7 views

CVE-2025-59559: Missing Authorization

Missing Authorization vulnerability in payrexx Payrexx Payment Gateway for WooCommerce woo-payrexx-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payrexx Payment Gateway for WooCommerce: from n/a through = 3.1.5...

4.3CVSS5.9AI score0.00246EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•2 views

CVE-2025-57976: Missing Authorization

Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CardCom Payment Gateway: from n/a through = 3.5.0.7...

5.3CVSS5.9AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/05 5:15 p.m.•18 views

CVE-2025-48102

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoin-payment-gateway-paid-downloads-membership allows Stored XSS.This issue affects GoUrl Bitcoin Payment Gateway & Paid...

5.9CVSS0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/05 4:15 p.m.•26 views

CVE-2025-48102 WordPress GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoin-payment-gateway-paid-downloads-membership allows Stored XSS.This issue affects GoUrl Bitcoin Payment Gateway & Paid...

5.9CVSS0.00182EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 4:15 p.m.•30 views

CVE-2025-48102

CVE-2025-48102 describes a stored XSS in the WordPress plugin GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership versions up to 1.6.6 . The vulnerability arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public sources in conne...

5.9CVSS5.2AI score0.00182EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/09/05 4:15 p.m.•7 views

CVE-2025-48102

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoin-payment-gateway-paid-downloads-membership allows Stored XSS.This issue affects GoUrl Bitcoin Payment Gateway & Paid...

5.9CVSS5.2AI score0.00182EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/05 4:15 p.m.•7 views

CVE-2025-48317 WordPress WooCommerce Payment Gateway for Saferpay Plugin <= 0.4.9 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traversal.This issue affects WooCommerce Payment Gateway for Saferpay: from n/a through = 0.4.9...

7.5CVSS5.2AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•3 views

CVE-2025-48317: Path Traversal: '.../...//'

Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traversal.This issue affects WooCommerce Payment Gateway for Saferpay: from n/a through = 0.4.9...

7.5CVSS5.8AI score0.00415EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•3 views

CVE-2025-48102: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoin-payment-gateway-paid-downloads-membership allows Stored XSS.This issue affects GoUrl Bitcoin Payment Gateway & Paid...

5.9CVSS5.8AI score0.00182EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•17 views

WordPress plugin GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership Cross-Site Scripting Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS5.4AI score0.00182EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/29 2:26 p.m.•26 views

CVE-2025-53295

Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iCount Payment Gateway: from n/a through = 2.0.7...

5.3CVSS5.9AI score0.00301EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/27 2:15 p.m.•15 views

CVE-2025-53295

Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iCount Payment Gateway: from n/a through = 2.0.7...

5.3CVSS0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/27 1:21 p.m.•26 views

CVE-2025-53295 WordPress iCount Payment Gateway plugin <= 2.0.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iCount Payment Gateway: from n/a through = 2.0.7...

5.3CVSS0.00301EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/27 1:21 p.m.•29 views

CVE-2025-53295

CVE-2025-53295 concerns iCount Payment Gateway &lt;= 2.0.6 with a Missing Authorization issue allowing access to constrained functionality. The provided data shows CVSS v3.1 base score 5.3 (Medium) and an unauthenticated/unauthorized access risk. Patch guidance appears in Patchstack: iCount Payme...

5.3CVSS5.9AI score0.00301EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/27 1:21 p.m.•11 views

CVE-2025-53295 WordPress iCount Payment Gateway plugin <= 2.0.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in iCount iCount Payment Gateway allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects iCount Payment Gateway: from n/a through 2.0.6...

5.3CVSS6.6AI score0.00301EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/27 12:00 a.m.•15 views

PT-2025-27198 · Unknown · Icount Payment Gateway

Name of the Vulnerable Software and Affected Versions: iCount Payment Gateway versions 2.0.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For iCount Payment Gateway...

5.3CVSS6.5AI score0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•14 views

WordPress plugin iCount Payment Gateway 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.5AI score0.00301EPSS
SaveExploits0References2
Rows per page
Query Builder