Duitku

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Duitku records in CISA KEV

No Duitku vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Duitku Payment Gateway 1 record MEDIUM

Records

1 record

TI-2024-00586 CVE-2024-0631 · GHSA-g5j5-rrpc-x3mq

Duitku Payment Gateway <= 2.11.6 - Missing Authorization via check_duitku_response

MEDIUM 63

The Duitku Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_duitku_response function in all versions up to, and including, 2.11.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00625 Published 2024-03-13 No fix listed CWE-284

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0