plugin

Sagepay Direct For Woocommerce Payment Gateway Vulnerabilities

1 known security issue reported for the Sagepay Direct For Woocommerce Payment Gateway WordPress plugin. Most recent disclosed May 25, 2014.

1 high

Running Sagepay Direct For Woocommerce Payment Gateway on your site? Check whether your installed version is affected.

Scan your site free

WooCommerce SagePay Direct Payment Gateway < 0.1.6.7 - Cross-Site Scripting

high

Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MD or (2) PARes parameter.

CVSS:: 7.1
Affected:: up to 0.1.6.7
Fixed in:: 0.1.6.7
Disclosed:: May 25, 2014

CVE-2014-4549 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database