Vulnerabilities / PayHere Payment Gateway
PayHere Payment Gateway vulnerabilities
Advisories WPSec published for PayHere Payment Gateway. Other sources may list more. Its attack surface: PayHere Payment Gateway on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-31 | WPSEC-2026-2170 | PayHere Payment Gateway <= 2.4.5 - Cross-Site Request Forgery to Saved Card Charge | Medium 4.3 | 2.4.6 |
| 2026-10-31 | WPSEC-2026-2169 | PayHere Payment Gateway <= 2.4.5 - Missing Authorization to Payment Capture | Medium 4.3 | 2.4.6 |
License: CC BY 4.0