← CVE Intelligence

CVE-2024-6205

PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi PUBLISHED

Description (CNA)

The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability.

Affected (CNA)

Vendor / productVersions
Unknown / PayPlus Payment Gatewayaffected 0 before 6.6.9

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.