Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-30
Payment Gateway - Security Vulnerability (CVE-2026-103299)
The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to authenticate the bank's payment-notification callback, allowing unauthenticated attackers to forge a valid notification and mark any WooCommerce order as paid on installs where the secret has not been set, and the same callback lets them move any pending order to a failed state whether or not the secret is configured.
PLUGIN
Payment Gateway
CVE-2026-103299
Risk Score
Threat Entry
Updated 2026-06-17
Payment Gateway - Broken Access Control (CVE-2024-0619)
The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the payment_callback() function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders, which can potentially lead to revenue loss.
PLUGIN
Payment Gateway
CVE-2024-0619
Risk Score
Threat Entry
Updated 2026-06-17
Payment Gateway - Server-Side Request Forgery (SSRF) (CVE-2022-45362)
Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0.
PLUGIN
Payment Gateway
CVE-2022-45362
Risk Score
Threat Entry
Updated 2026-06-17
Payment Gateway - Cross-Site Scripting (XSS) (CVE-2023-48737)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7.
PLUGIN
Payment Gateway
CVE-2023-48737
Risk Score
Threat Entry
Updated 2026-06-17
Payment Gateway - SQL Injection (CVE-2022-45805)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3.
PLUGIN
Payment Gateway
CVE-2022-45805
Risk Score