Vendor

evertec

1 known vulnerabilities.

Products

WooCommerce Placetopay Gateway Belice 1 WooCommerce Placetopay Gateway Ecuador 1 WooCommerce Placetopay Gateway Colombia 1 WooCommerce Placetopay Gateway Uruguay 1 WooCommerce Placetopay Gateway 1 WooCommerce Placetopay Gateway Honduras 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2026-11324

WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output…

evertec WooCommerce Placetopay Gateway Honduras WooCommerce Placetopay Gateway Belice WooCommerce Placetopay Gateway Colombia Web / CMS

Jul 17, 2026