plugin

Woocommerce Gateway Placetopay Belice Vulnerabilities

1 known security issue reported for the Woocommerce Gateway Placetopay Belice WordPress plugin. Most recent disclosed Jul 16, 2026.

1 medium

Running Woocommerce Gateway Placetopay Belice on your site? Check whether your installed version is affected.

Scan your site free

WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url'

medium

The WooCommerce Placetopay Gateway and PlacetoPay/AvalPay gateway plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'redirect-url' parameter in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...

CVSS:: 6.1
Affected:: up to 3.2.2
Fix:: No patched version reported
Disclosed:: Jul 16, 2026

CVE-2026-11324 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database