Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-103346Payflex Payment Gateway · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Tomlister… High7.1EPSS 0.1%2026-10-06CVE Database V5CVE-2026-103346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway: from n/a through 2.7.1. EPSS 0.1%Vulnerability Tomlister	CVE Database V5	2026-10-06
Medium	4.7	EPSS 0.3%	CVE-2024-47646Payflex Payment Gateway · Open Redirect Medium4.7EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47646 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in tomlister Payflex Payment Gateway payflex-payment-gateway.This issue affects Payflex Payment Gateway: from n/a through <= 2.6.1. EPSS 0.3%Vulnerability tomlister	CVE Database V5	2024-10-05
Medium	5.3	EPSS 0.4%	CVE-2024-0619Payflex Payment Gateway · Missing Authorization Medium5.3EPSS 0.4%2024-07-11CVE Database V5CVE-2024-0619 The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the payment_callback() function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders, which can potentially lead to revenue loss. EPSS 0.4%Vulnerability tomlister #cwe-862	CVE Database V5	2024-07-11

Showing 1–3 of 3 results