Input validation vulnerability in WooCommerce SagePay Direct Payment Gateway 0.1.6.7

The WooCommerce SagePay Direct Payment Gateway plugin before version 0.1.6.7 for WordPress had multiple weaknesses that allowed attackers to inject malicious web scripts or HTML into a website. These vulnerabilities were related to the MD and PARes parameters.

Detected in:

WooCommerce SagePay Direct Payment Gateway open vulnerable versions: >= * < 0.1.6.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.