The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.0072·Published 2024-01-01·Fixed in 2.2.12CWE-532