payuplugin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

payuplugin records in CISA KEV

No payuplugin vulnerabilities are listed in CISA KEV.

1 record

TI-2024-11375 CVE-2024-12264 · GHSA-gpww-5rqj-3jh7

MEDIUM 50

The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00757 Published 2025-01-07 No fix listed CWE-287