Payplus Payment Gateway vulnerabilities
2 known vulnerabilities affecting payplus/payplus_payment_gateway.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-6205P1CRITICALCVSS 9.8ExploitedPoCfixed in 6.6.92024-07-19
CVE-2024-6205 [CRITICAL] CWE-89 CVE-2024-6205: The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a pa
The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.
nvd
CVE-2024-37459P4MEDIUMCVSS 6.1fixed in 6.6.92024-07-21
CVE-2024-37459 [MEDIUM] CWE-79 CVE-2024-37459: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8.
nvd