Read the docs

evertec

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

evertec records in CISA KEV

No evertec vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-09774 CVE-2026-11324 · GHSA-g666-vr5r-v828

WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

Priority LOW 27

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to ins…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-07-17 No fix listed CWE-79
Open these records in search →