CyberSecBulletin

Payuplugin vulnerabilities

We track 1 vulnerability in Payuplugin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Payuplugin vulnerabilities

  • 9.8 Critical severity

    PayU CommercePro Plugin: Improper Authentication

    CVE-2024-12264Payuplugin

    The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost REST API endpoints not properly verif