Extension WordPress

Vulnérabilités Total processing card payments for WooCommerce

Cette page rassemble les failles publiées pour Total processing card payments for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
8,1CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Total processing card payments for WooCommerce

3 fiches

CVE-2025-46486 Moyenne · 4,9
Total processing card payments for WooCommerce

Nomupay Payment Processing Gateway <= 7.1.7 – Authenticated (Shop Manager+) Arbitrary File Download

The Total processing card payments for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.1.7. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to download…

Versions affectées

*-7.1.7

Correctif

7.1.8

Publication

02/05/2025

CVE-2025-32513 Moyenne · 6,1
Total processing card payments for WooCommerce

Nomupay Payment Processing Gateway <= 7.1.6 – Reflected Cross-Site Scripting

The Nomupay Payment Processing Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 7.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…

Versions affectées

*-7.1.6

Correctif

7.1.7

Publication

14/04/2025

CVE-2025-32209 Élevée · 8,1
Total processing card payments for WooCommerce

Nomupay Payment Processing Gateway <= 7.1.5 – Authenticated (Subscriber+) Arbitrary File Download

The Total processing card payments for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 7.1.5 via the ajax_download_debugdata_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and…

Versions affectées

*-7.1.5

Correctif

7.1.6

Publication

07/04/2025

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités