Description
The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PayHere Payment Gateway | < 2.2.12 | 2.2.12 |
References
- https://wpscan.com/vulnerability/423c8881-628b-4380-9677-65b3f5165efe exploit vdb-entry technical-description