Lucene search
K

74 matches found

Nuclei
Nuclei
added yesterday116 views

WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery

WordPress Paytm Payment Gateway plugin through 2.7.0 contains a server-side request forgery vulnerability. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

7.2CVSS6.8AI score0.3293EPSS
Exploits0References5
Nuclei
Nuclei
added yesterday22 views

WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection

WordPress Paytm Payment Gateway plugin through 2.7.3 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-45805 info: name: WordPress Payt...

9.8CVSS8.1AI score0.03031EPSS
Exploits0References5
Nuclei
Nuclei
added yesterday27 views

WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection

WordPress Paytm Donation plugin through 1.3.2 is susceptible to authenticated SQL injection. The plugin does not sanitize, validate, or escape the id GET parameter before using it in a SQL statement when deleting donations. An attacker can possibly obtain sensitive information, modify data, and/o...

7.2CVSS7.3AI score0.21043EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-32205

Malicious code in bioql PyPI...

7.1CVSS7.1AI score0.00104EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8507

Malicious code in bioql PyPI...

5.9CVSS9.2AI score0.00091EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3836

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00178EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:51 a.m.4 views

CVE-2023-28535

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Paytm Paytm Payment Donation plugin = 2.2.0 versions...

7.1CVSS5.9AI score0.00104EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:51 a.m.4 views

CVE-2022-45805

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3...

9.8CVSS8.9AI score0.03031EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:22 p.m.2 views

CVE-2021-24554

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

7.2CVSS7.3AI score0.21043EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/03/29 3:25 p.m.8 views

CVE-2025-22640

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Stored XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.3...

5.9CVSS7.2AI score0.00091EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 4:15 p.m.6 views

CVE-2025-22640

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Stored XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.3...

5.9CVSS0.00091EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 3:12 p.m.11 views

CVE-2025-22640 WordPress Paytm Payment Donation Plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Stored XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.3...

5.9CVSS0.00091EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 3:12 p.m.47 views

CVE-2025-22640

CVE-2025-22640 : In WordPress Paytm Payment Donation plugin, versions up to and including 2.3.3 contain an stored cross‑site scripting (XSS) flaw due to improper input neutralization during web page generation. Exploitation context is not detailed in the provided docs, but the issue is classified...

5.9CVSS7.2AI score0.00091EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.1 views

WordPress plugin Paytm Payment Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS8.2AI score0.00091EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 2:33 a.m.4 views

CVE-2025-24635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Reflected XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.1...

7.1CVSS5.9AI score0.00178EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:26 p.m.22 views

CVE-2022-45362

Server-Side Request Forgery SSRF vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0...

7.2CVSS6.4AI score0.3293EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/03 8:17 p.m.1 views

WordPress Paytm Payment Donation Plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khang Duong Patchstack Alliance in WordPress Plugin Paytm Payment Donation versions = 2.3.3...

5.9CVSS6.1AI score0.00091EPSS
Exploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 8:21 a.m.3 views

Malicious code in paytm-blink-checkout-vue2-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385d687658556da26e8a2d0bb6c9e941618705df2a677b38734b42ee715d7c5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSV
OSV
added 2025/02/03 8:21 a.m.1 views

MAL-2025-1166 Malicious code in paytm-blink-checkout-vue3-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53da4c93e68194060525f1ea8d686d00c5bbe1e73fa09bf04fd0ccfe8de97e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
OSV
OSV
added 2025/02/03 8:21 a.m.2 views

MAL-2025-1165 Malicious code in paytm-blink-checkout-vue2-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385d687658556da26e8a2d0bb6c9e941618705df2a677b38734b42ee715d7c5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
Rows per page
Query Builder