CVE-2022-45362

The WordPress Paytm Payment Gateway plugin (versions through 2.7.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) . An unauthenticated attacker can exploit the url parameter in the curltest action to force the server to make arbitrary HTTP requests to an arbitrary domain. This may allow ...

CVE-2022-45805

CVE-2022-45805 affects the WordPress Paytm Payment Gateway plugin up to version ≤ 2.7.3. The connected documents confirm a SQL Injection vulnerability in this plugin, enabling an attacker to potentially obtain sensitive information, modify data, and perform unauthorized operations within the affe...