Lucene search
Supun HalangodaWPVDB-ID:423C8881-628B-4380-9677-65B3F5165EFEHistoryDec 08, 2023 - 12:00 a.m.
PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
2023-12-0800:00:00
Supun Halangoda
wpscan.com
5
payhere payment gateway
unauthenticated
log data disclosure
plugin
sensitive information
publicly accessible
transactions
Description The plugin automatically creates publicly-accessible log files containing sensitive information when transactions occur.
PoC
https://www.suppliment.lk/wp-content/uploads/payhere-logs/?SD https://www.medic.lk/wp-content/uploads/payhere-logs/?SD
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.2.12 |
Related
prion
prion
Information disclosure
2024-01-01 15:15:00
nvd
nvd
CVE-2023-6064
2024-01-01 15:15:43
cve
cve
CVE-2023-6064
2024-01-01 15:15:43
wpexploit
wpexploit
PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
2023-12-08 00:00:00
cvelist
cvelist
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.0%
Related for WPVDB-ID:423C8881-628B-4380-9677-65B3F5165EFE