tomlister

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

tomlister records in CISA KEV

No tomlister vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-68269 CVE-2026-103346 · GHSA-9hmp-g9pr-gr8c

Cross-site scripting in Payflex Payment Gateway WordPress plugin

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gate…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-06 No fix listed CWE-79

TI-2024-31925 CVE-2024-47646 · GHSA-fxw2-w447-93r7

WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in tomlister Payflex Payment Gateway payflex-payment-gateway.This issue affects Payflex Payment Gateway: from n/a through <= 2.6.1.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00332 Published 2024-10-05 No fix listed CWE-601

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0