WordPress Plugin Vulnerabilities

Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion

Description

The Payment Gateways Caller for WP e-Commerce WordPress plugin was affected by a load_merchant Parameter Traversal Local file Inclusion security vulnerability.

Affects Plugins

Plugin icon
payment-gateways-caller-for-wp-e-commerce
Fixed in 0.1.1

References

URL
https://packetstormsecurity.com/files/#123744/

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
e0583760-a0ad-4a5c-8882-bfc0903e5e04

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-05-22
Title
Unite Gallery Lite < 1.7.60 - Admin+ Local File Inclusion
Published
2026-01-16
Title
Feeds for YouTube Pro < 2.6.1 - Unauthenticated Arbitrary File Read via Path Traversal
Published
2015-07-05
Title
Image Export <= 1.1.0 - Directory Traversal
Published
2026-03-20
Title
Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Arbitrary File Deletion
Published
2026-01-13
Title
Gotham Block Extra Light < 1.6.0 - Authenticated (Contributor+) Arbitrary File Read via 'ghostban' Shortcode