WordPress Plugin Vulnerabilities

WP Payeezy Pay < 2.98 - Local File Inclusion

Description

The WP Payeezy Pay WordPress plugin was affected by a Local File Inclusion security vulnerability.

Affects Plugins

Plugin icon
wp-payeezy-pay
Fixed in 2.98

References

CVE
CVE-2018-20985

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
882abb32-d38b-4df5-840d-18189daed6bc

Timeline

Publicly Published
2018-12-07 (about 7 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2017-09-21
Title
Smush Image Compression and Optimization <= 2.7.5 - File Transversal
Published
2025-08-06
Title
Prevent files / folders access < 2.6.1 - Authenticated (Subscriber+) Path Traversal
Published
2025-03-10
Title
HUSKY < 1.3.6.6 - Unauthenticated Local File Inclusion
Published
2025-08-14
Title
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
Published
2017-09-19
Title
WordPress 4.4-4.8.1 - Path Traversal in Customizer