What’s Vulnerable › Products

PayHere Payment Gateway vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your PayHere Payment Gateway version is affected

Latest PayHere Payment Gateway vulnerabilities

• CVE-2025-15475 — PayHere Payment Gateway Plugin for WooCommerce <= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification (CVSS 5.3)
• CVE-2023-6064 — PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure (CVSS 7.5)