Product · evertec

WooCommerce Placetopay Gateway

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2026-11324

WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output…

evertec WooCommerce Placetopay Gateway Honduras WooCommerce Placetopay Gateway Belice WooCommerce Placetopay Gateway Colombia Web / CMS

Jul 17, 2026