payever

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

payever records in CISA KEV

No payever vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-70355 CVE-2026-42716 · GHSA-hqp4-gqgp-vfhp

PHP Object Injection in Payever WooCommerce Gateway plugin

MEDIUM 49

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00375 Published 2026-10-10 No fix listed CWE-502

TI-2026-86163 CVE-2026-93754 · GHSA-5w75-33gq-gccg

Unauthenticated file upload in payever WooCommerce Gateway

MEDIUM 44

The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2026-11-07 No fix listed CWE-434

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0