7.5
High
CVE-2023-6064 The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files…
Description
The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PayHere Payment Gateway 2.2 | earliest → < 2.2.12 | 2.2.12 |