Vulnerabilities

TI-2025-23217 CVE-2025-32119 · GHSA-hchj-r5q6-j5p3

WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CardGate CardGate Payments for WooCommerce cardgate allows Blind SQL Injection.This issue affects CardGate Payments fo…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00345 Published 2025-04-10 No fix listed CWE-89

TI-2024-11368 CVE-2024-12257 · GHSA-vvm9-53m2-qv97

CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

LOW 27

The CardGate Payments for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00284 Published 2024-12-07 No fix listed CWE-79

TI-2020-07075 CVE-2020-8818 · GHSA-qf6q-qfwp-vp44

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2.

MEDIUM 42

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0417 Published 2020-02-25 Fixed in 2.0.33 CWE-346

TI-2020-07076 CVE-2020-8819 · GHSA-5pq5-9phv-q5j3

An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce.

MEDIUM 43

An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.04877 Published 2020-02-25 Fixed in 3.1.16 CWE-346

Vulnerabilities

Filters

WordPress CardGate Payments for WooCommerce plugin <= 3.2.1 - SQL Injection vulnerability

CardGate Payments for WooCommerce <= 3.2.1 - Reflected Cross-Site Scripting

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2.

An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce.