WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
payaza
Published
2025-12-04
Title
Payaza <= 0.3.8 - Missing Authorization to Unauthenticated Order Status Update
Slug
payday
Published
2025-04-03
Title
Payday <= 3.3.18 - Missing Authorization
Slug
payflex-payment-gateway
Published
2024-07-10
Title
Payflex Payment Gateway < 2.6.0 - Missing Authorization to Order Status Update
Slug
payflex-payment-gateway
Published
2024-09-30
Title
Payflex Payment Gateway < 2.6.2 - Open Redirect
Slug
payform
Published
2025-01-16
Title
PayForm <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
paygreen-payment-gateway
Published
2025-01-06
Title
PayGreen Payment Gateway < 1.0.27 - Reflected Cross-Site Scripting
Slug
payhere-payment-gateway
Published
2023-12-07
Title
PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
Slug
payhere-payment-gateway
Published
2026-01-13
Title
PayHere Payment Gateway Plugin for WooCommerce < 2.4.0 - Missing Authorization to Unauthenticated Order Status Modification
Slug
paymaya-checkout-for-woocommerce
Published
2025-07-16
Title
Maya Business < 1.3.0 - Unauthenticated Insecure Direct Object Reference
Slug
payment-form-for-paypal-pro
Published
2015-10-11
Title
Payment Form for PayPal Pro <= 1.0.1 - Multiple Reflected Cross-Site Scripting (XSS)
Slug
payment-form-for-paypal-pro
Published
2020-07-02
Title
Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection
Slug
payment-form-for-paypal-pro
Published
2025-04-17
Title
Payment Form for PayPal Pro < 1.1.73 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
payment-forms-for-paystack
Published
2024-02-07
Title
Payment Forms for Paystack < 4.0.0 - Contributor+ Stored XSS
Slug
payment-forms-for-paystack
Published
2025-02-03
Title
Payment Forms for Paystack < 4.0.2 - Authenticated (Administrator+) SQL Injection
Slug
payment-forms-for-paystack
Published
2025-04-09
Title
Payment Forms for Paystack < 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
payment-gateway-for-telcell
Published
2024-01-30
Title
Payment Gateway for Telcell < 2.0.4 - Unauthenticated Open Redirect
Slug
payment-gateway-groups-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
payment-gateway-groups-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
payment-gateway-payfabric
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
payment-gateway-payfabric
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
payment-gateway-pix-for-woocommerce
Published
2026-03-12
Title
Pix for WooCommerce < 1.6.0 - Unauthenticated Arbitrary File Upload
Slug
payment-gateway-stripe-and-woocommerce-integration
Published
2021-06-07
Title
Stripe Payment Gateway for WooCommerce < 3.6.0 - Reflected Cross-Site Scripting (XSS)
Slug
payment-gateway-stripe-and-woocommerce-integration
Published
2023-08-01
Title
Stripe Payment Plugin for WooCommerce < 3.7.8 - Authentication Bypass
Slug
payment-gateway-stripe-and-woocommerce-integration
Published
2023-08-17
Title
Stripe Payment < 3.8.0 - Unauthenticated WC Order Status Update
Slug
payment-gateway-stripe-and-woocommerce-integration
Published
2024-01-18
Title
Stripe Payment Plugin for WooCommerce < 3.8.0 - Unauthenticated SQL Injection