Payplus Payplus Payment Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Payplus Payplus Payment Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-6205 — CVSS 9.8 (critical): The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL…
• CVE-2024-37459 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PayPlus LTD PayPlus Payment…