WordPress plugin PayPlus Payment Gateway security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

PT-2024-27663 · Unknown · Payplus Payment Gateway

Name of the Vulnerable Software and Affected Versions: PayPlus Payment Gateway versions 7.0.7 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for potential exploitation...

WordPress Payflex Payment Gateway plugin <= 2.5.0 - Missing Authorization to Order Status Update vulnerability

Missing Authorization to Order Status Update vulnerability discovered by Francesco Carlucci in WordPress Plugin Payflex Payment Gateway versions = 2.5.0...

CVE-2024-0619

The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the paymentcallback function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders,...

CVE-2024-0619

The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the paymentcallback function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders,...

CVE-2024-0619 Payflex Payment Gateway <= 2.5.0 - Missing Authorization to Order Status Update

The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the paymentcallback function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders,...

CVE-2024-0619 Payflex Payment Gateway <= 2.5.0 - Missing Authorization to Order Status Update

The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the paymentcallback function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders,...

CVE-2024-0619

CVE-2024-0619 concerns the Payflex Payment Gateway WordPress plugin, where a missing capability check in payment_callback() in all versions up to and including 2.5.0 permits unauthenticated modification of order status. The NVD description notes unauthorized data modification could lead to revenu...

WordPress plugin Payflex Payment Gateway security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

WordPress Payflex Payment Gateway Plugin <= 2.5.0 is vulnerable to Broken Access Control

Software Payflex Payment Gateway Type Plugin Vulnerable versions = 2.5.0 Fixed in 2.6.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0619 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID acb69f184f3c Credits Francesco Carlucci...

WordPress HitPay Payment Gateway for WooCommerce Plugin <= 4.1.3 is vulnerable to Sensitive Data Exposure

Software HitPay Payment Gateway for WooCommerce Type Plugin Vulnerable versions = 4.1.3 Fixed in 4.1.4 OWASP Top 10 A9: Security Logging and Monitoring Failures Classification Sensitive Data Exposure CVE CVE-2024-38747 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID...

WordPress PayPlus Payment Gateway plugin <= 7.0.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin PayPlus Payment Gateway versions = 7.0.7...

CVE-2024-37172

SAP S/4HANA Finance Advanced Payment Management does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on the integrity...

CVE-2024-37172

CVE-2024-37172 affects SAP S/4HANA Finance (Advanced Payment Management). The issue is an insufficient authorization check for an authenticated user, enabling privilege escalation. Impact is described as low for confidentiality and availability, with no effect on integrity. No exploitation status...

WordPress PayPlus Payment Gateway Plugin <= 7.0.7 is vulnerable to SQL Injection

Software PayPlus Payment Gateway Type Plugin Vulnerable versions = 7.0.7 Fixed in 7.0.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-37564 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 282d31811f37 Credits LVT-tholv2k Required privilege Subscrib...

GHSA-M9GV-6P22-QGMJ ai-controller-frontend payment status in basket isn't reset

Impact Payment status in basket isn't reset...

ai-controller-frontend payment status in basket isn't reset

Impact Payment status in basket isn't reset...

The vulnerability of the “Manage Incoming Payment Files” component of the SAP S/4HANA software platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the “Manage Incoming Payment Files” component in the SAP S/4HANA software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

ai-controller-frontend payment status in basket isn't reset

Payment status in basket isn't reset...

Improper Enforcement Of Behavioral Workflow

aimeos/ai-controller-frontend is vulnerable to Improper Enforcement of Behavioral Workflow. The vulnerability is due to not resetting the payment status of a user's basket after the user completes a purchase...