Vulnerabilities

TI-2022-22328 CVE-2022-45362 · GHSA-m6wm-25pf-pmrw

WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)

MEDIUM 60

Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.41762 Published 2023-12-07 No fix listed CWE-918

TI-2022-22609 CVE-2022-45805 · GHSA-vh27-7qvw-fwfm

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

MEDIUM 53

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a thr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02327 Published 2023-11-03 No fix listed CWE-89

TI-2023-13067 CVE-2023-28535 · GHSA-8pg8-2gfr-5c6r

WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-14 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)