WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
payplus-payment-gateway
Published
2026-09-23
Title
PayPlus Payment Gateway < 8.2.6 - Missing Authorization
Slug
paytiko
Published
2025-07-03
Title
Paytiko for WooCommerce < 1.4.8 - Missing Authorization
Slug
paytium
Published
2020-05-12
Title
Paytium < 3.1.2 - Stored Cross-Site Scripting (XSS)
Slug
paytium
Published
2022-11-30
Title
Paytium < 4.3.7 - Admin+ Stored XSS
Slug
paytium
Published
2024-02-12
Title
Paytium: Mollie payment forms & donations < 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
paytium
Published
2024-11-01
Title
Paytium < 4.4.11 - Missing Authorization
Slug
paytium
Published
2025-01-24
Title
Paytium < 4.4.12 - Unauthenticated Full Path Disclosure
Slug
paytium
Published
2026-06-23
Title
Paytium: Mollie payment forms & donations < 5.0.3 - Unauthenticated Privilege Escalation
Slug
paytium
Published
2026-09-23
Title
Paytium: Mollie payment forms & donations < 5.0.4 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter
Slug
paytium
Published
2026-10-22
Title
Paytium: Mollie payment forms & donations < 5.0.6 - Unauthenticated PHP Object Injection
Slug
paytm-donation
Published
2023-04-14
Title
Paytm Payment Donation < 2.2.1 - Reflected XSS
Slug
paytm-donation
Published
2025-02-03
Title
Paytm Payment Donation <= 2.3.3 - Admin+ Stored XSS
Slug
paytm-donation
Published
2025-01-05
Title
Paytm Payment Donation < 2.3.2 - Reflected Cross-Site Scripting
Slug
paytm-payments
Published
2023-02-22
Title
Paytm Payment Gateway < 2.7.7 - Editor+ SQLi
Slug
paytm-payments
Published
2026-09-29
Title
Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback
Slug
paytm-payments
Published
2026-09-29
Title
Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment Callback
Slug
paytm-payments
Published
2026-09-29
Title
Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback
Slug
paytpv-for-woocommerce
Published
2026-10-15
Title
PAYCOMET for WooCommerce < 5.46 - Reflected Cross-Site Scripting
Slug
paytpv-for-woocommerce
Published
2026-10-26
Title
PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass
Slug
paytr-taksit-tablosu-woocommerce
Published
2023-11-20
Title
PayTR Taksit Tablosu < 1.3.2 - Unauthenticated Settings Update
Slug
paytr-taksit-tablosu-woocommerce
Published
2023-12-07
Title
PayTR Taksit Tablosu <= 1.3.4 - CSRF
Slug
payu-india
Published
2024-02-26
Title
PayU India < 3.8.9 - Reflected XSS via type
Slug
payu-india
Published
2025-01-06
Title
PayU CommercePro Plugin < 3.8.4 - Unauthenticated Privilege Escalation
Slug
payu-india
Published
2025-06-05
Title
PayU CommercePro Plugin < 3.8.8 - Authentication Bypass
Slug
payu-india
Published
2026-07-07
Title
PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering