TI-2025-04623 CVE-2025-5154 · GHSA-q47v-w7jj-mhcf
PhonePe App SQLite Database databases cleartext storage in file
Priority MEDIUM 54
A vulnerability was identified in PhonePe App 25.03.21.0 on Android.
Vulnerabilities
6 records
TI-2022-22638 CVE-2022-45835 · GHSA-5qhh-783c-vpmm
WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)
Priority HIGH 65
Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15.
TI-2018-12400 CVE-2018-17403 · GHSA-cf3v-2g3j-9896
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android…
Priority MEDIUM 41
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to impersonate a user and set up their account without their knowledge.
TI-2018-12399 CVE-2018-17402 · GHSA-534q-mqw6-hw55
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android…
Priority LOW 26
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit card number, expiration date, and CVV number.
TI-2018-12398 CVE-2018-17401 · GHSA-q2hp-4wm7-pwx5
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android…
Priority MEDIUM 41
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover attacks by exploiting its Forgot Password feature.
TI-2018-12397 CVE-2018-17400 · GHSA-pv8p-frrc-h2w3
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android…
Priority LOW 31
The PhonePe wallet (aka com.PhonePe.app) application 3.0.6 through 3.3.26 for Android might allow attackers to perform Account Takeover attacks by intercepting the user name and PIN during the initial configuration of th…