PayPlus vulnerabilities
We track 2 vulnerabilities in PayPlus products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 19, 2024.
2vulnerabilities
1critical
1high
0exploited
9.2average CVSS score
Latest PayPlus vulnerabilities
- 9.8 Critical severity
PayPlus Payment Gateway: Improper Neutralization of Special Elements used in an SQL Command
The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.
- 8.5 High severity
PayPlus Payment Gateway: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PayPlus LTD PayPlus Payment Gateway.This issue affects PayPlus Payment Gateway: from n/a through 7.0.7.