Skip to content
Sign in
7.6 High

CVE-2024-6205 The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using…

Description

The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.

Affected products and versions

Product Affected versions Fixed in
PayPlus Payment Gateway 6.6 earliest → < 6.6.9 6.6.9
payplus_payment_gateway 6.6 earliest → < 6.6.9 6.6.9

Other CVEs of PayPlus Payment Gateway

The 3 CVEs of PayPlus Payment Gateway →
CVE-2026-12973 The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation… 6.5 Medium CVE-2026-12972 The PayPlus Payment Gateway WordPress plugin before 8.2.2 does not perform authorization or order-ownership validation… 5.3 Medium
Track this CVE