Lucene search

K
wpexploitSupun HalangodaWPEX-ID:423C8881-628B-4380-9677-65B3F5165EFE
HistoryDec 08, 2023 - 12:00 a.m.

PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure

2023-12-0800:00:00
Supun Halangoda
30
payhere
payment gateway
unauthenticated
log data
disclosure
exploit

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.0%

Description The plugin automatically creates publicly-accessible log files containing sensitive information when transactions occur.

https://www.suppliment.lk/wp-content/uploads/payhere-logs/?SD
https://www.medic.lk/wp-content/uploads/payhere-logs/?SD

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.0%

Related for WPEX-ID:423C8881-628B-4380-9677-65B3F5165EFE