Skip to content
OpenAdvisories

Vendor

Tomlister

3 known vulnerabilities.

Products

Payflex Payment Gateway 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2024-47646

    WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in tomlister Payflex Payment Gateway payflex-payment-gateway.This issue affects Payflex Payment Gateway: from n/a through <= 2.6.1.

    Tomlister Payflex Payment Gateway
  • Medium 5.3
    CVE-2024-0619

    Payflex Payment Gateway <= 2.5.0 - Missing Authorization to Order Status Update

    The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the payment_callback() function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated at…

    Tomlister Payflex Payment Gateway Web / CMS