Skip to content
OpenAdvisories

Vendor

payuplugin

1 known vulnerabilities.

Products

PayU CommercePro Plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-12264

    PayU CommercePro Plugin <= 3.8.3 - Unauthenticated Privilege Escalation

    The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost REST API endpoints not properly veri…

    payuplugin PayU CommercePro Plugin Web / CMS