Skip to content
OpenAdvisories

Vendor

payever

2 known vulnerabilities.

Products

payever Checkout – Composable Payment Gateway 1 Payever - WooCommerce Gateway 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-93754

    payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

    The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0. Three WooCommerce-API callbacks (payever_set_sandbox_api_keys, payever_toggle_subsc…

    payever payever Checkout – Composable Payment Gateway Web / CMS
  • Critical 9.8
    CVE-2026-42716

    WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

    payever Payever - WooCommerce Gateway Web / CMS