plugin

Multisafepay Vulnerabilities

1 known security issue reported for the Multisafepay WordPress plugin. Most recent disclosed Jul 18, 2022.

1 high

Running Multisafepay on your site? Check whether your installed version is affected.

MultiSafepay plugin for WooCommerce <= 4.15.0 - Arbitrary File Read

high

The MultiSafepay plugin for WooCommerce plugin for WordPress is vulnerable to arbitrary file read in versions up to, and including, 4.15.0 via the log_filename parameter. This is due to insufficient file path validation. This makes it possible for unauthenticated attackers to read arbitrary files on the server, includi...

CVSS:: 7.5
Affected:: up to 4.15.0
Fixed in:: 4.16.0
Disclosed:: Jul 18, 2022

CVE-2022-33901 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database