Vulnerabilities

TI-2026-68269 CVE-2026-103346 · GHSA-9hmp-g9pr-gr8c

Cross-site scripting in Payflex Payment Gateway WordPress plugin

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gate…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-06 No fix listed CWE-79

TI-2024-31925 CVE-2024-47646 · GHSA-fxw2-w447-93r7

WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in tomlister Payflex Payment Gateway payflex-payment-gateway.This issue affects Payflex Payment Gateway: from n/a through <= 2.6.1.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00332 Published 2024-10-05 No fix listed CWE-601

Vulnerabilities

Filters

Cross-site scripting in Payflex Payment Gateway WordPress plugin

WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability