Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-42637PayPlug for WooCommerce (Official) · Missing Authorization Medium6.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42637 Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions. EPSS 0.3%Vulnerability Payplug #cwe-862	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-39751PayPlug for WooCommerce (Official) · Missing Authorization High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39751 Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. EPSS 0.3%Vulnerability Payplug #cwe-862	CVE Database V5	2026-10-06
Medium	4.9	EPSS 0.4%	CVE-2026-75959GoPay for WooCommerce · SQL Injection Medium4.9EPSS 0.4%2026-09-19CVE Database V5CVE-2026-75959 The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_table_filter' parameter in all versions up to, and including, 1.0.36 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with shop manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. EPSS 0.4%Vulnerability gopayplugins #cwe-89	CVE Database V5	2026-09-19

Showing 1–3 of 3 results