CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Payfast Gateway Add On.This issue affects Paid Memberships Pro – Payfast Gateway Add On: from n/a through 1.4.1.
Explanation of Vulnerability in Simple Terms
The Payfast Gateway Add-On for Paid Memberships Pro exposes sensitive payment information through improper logging or storage mechanisms. An attacker on the network can read this data without authentication. The vulnerability affects versions up to 1.4.1 and may expose customer payment details or transaction records stored insecurely by the plugin.
What an attacker can do
Read sensitive payment or customer data transmitted or stored by the plugin.
Potential impact on your site
Customer payment information and transaction details may be exposed to unauthorized parties.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
