Input validation vulnerability in PayPlus Payment Gateway 7.0.7

The PayPlus Payment Gateway plugin for WordPress has a security issue that allows attackers to access sensitive information from the database. This vulnerability is present in versions up to 7.0.7 because the user input is not properly filtered and the SQL query is not well-prepared. Attackers with subscriber-level access or higher can add their own queries to the existing ones, which puts the website at risk.

Detected in:

PayPlus Payment Gateway open vulnerable versions: >= * <= 7.0.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.