Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: axima Clear all filters
TI-2025-30145 CVE-2025-47648 · GHSA-qqhm-4g64-2g2j

WordPress Pays – WooCommerce Payment Gateway plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in axima Pays – WooCommerce Payment Gateway axima-payment-gateway allows Stored XSS.This issue affects Pays – WooCommerce Payment Gateway: from n/a through <= 2.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00152 Published 2025-05-07 No fix listed CWE-352