What’s Vulnerable › Products

PayPlus Payment Gateway vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your PayPlus Payment Gateway version is affected

Latest PayPlus Payment Gateway vulnerabilities

• CVE-2026-12973 — PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification (CVSS 6.5)
• CVE-2026-12972 — PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering (CVSS 5.3)
• CVE-2024-37459 — WordPress PayPlus Payment Gateway plugin <= 6.6.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-6205 — PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi (CVSS 9.8)
• CVE-2024-37564 — WordPress PayPlus Payment Gateway plugin <= 7.0.7 - SQL Injection vulnerability (CVSS 8.5)