CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2023-48737 – WordPress TriPay Payment Gateway Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)
https://notcve.org/view.php?id=CVE-2023-48737
23 Nov 2023 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7. Vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web ('Cross-Site Scripting') en PT Trijaya Digital Grup TriPay Payment Gateway permite almacenar XSS. Este problema afecta a TriPay Payment Gateway: desde n/a hasta 3.2.7. The TriPay Paym... • https://patchstack.com/database/vulnerability/tripay-payment-gateway/wordpress-tripay-payment-gateway-plugin-3-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-45805 – WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection
https://notcve.org/view.php?id=CVE-2022-45805
22 Feb 2023 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3. Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL ("Inyección SQL") en Paytm Paytm Payment Gateway paytm-paids permite la inyección SQL. Este problema afecta a Paytm Payment Gateway: desde n/a hasta 2.7.3. The Paytm Payment Gateway ... • https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-3-auth-sql-injection-sqli-vulnerability?_s_id=cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2022-45362 – WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)
https://notcve.org/view.php?id=CVE-2022-45362
29 Nov 2022 — Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0. Vulnerabilidad de Server-Side Request Forgery (SSRF) en Paytm Paytm Payment Gateway. Este problema afecta a Paytm Payment Gateway: desde n/a hasta 2.7.0. The Paytm Payment Gateway plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 2.7.0. This is due to Server-Side Request Forgery. • https://patchstack.com/database/vulnerability/paytm-payments/wordpress-paytm-payment-gateway-plugin-2-7-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve • CWE-918: Server-Side Request Forgery (SSRF) •