Read the docs

PayPlus LTD

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

PayPlus LTD records in CISA KEV

No PayPlus LTD vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Payplus Payment Gateway 2 records HIGH

Records

2 records in Payplus Payment Gateway · all components

TI-2024-05754 CVE-2024-6205 · GHSA-h8w3-xwp6-m9v8

PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi

Priority HIGH 76

The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04134 Published 2024-07-19 Fixed in 6.6.9 CWE-89
TI-2024-24963 CVE-2024-37459 · GHSA-mf8x-j428-fg35

WordPress PayPlus Payment Gateway plugin <= 6.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority HIGH 70

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-21 No fix listed CWE-79
Open these records in search →