Filtered by vendor Payplus Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-37459 1 Payplus 1 Payplus Payment Gateway 2024-08-02 7.1 High
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8.
CVE-2024-6205 1 Payplus 1 Payplus Payment Gateway 2024-08-01 9.8 Critical
The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.