CVE-2023-6064

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

Vendor	Product	Versions
Unknown	PayHere Payment Gateway	< 2.2.12

References

https://wpscan.com/vulnerability/423c8881-628b-4380-9677-65b3f5165efeExploit, Third Party Advisory
https://wpscan.com/vulnerability/423c8881-628b-4380-9677-65b3f5165efeExploit, Third Party Advisory

Timeline

Published: Jan 1, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-60655.3The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious acto CVE-2023-60664.3The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of its AJAX action callb CVE-2023-60675.4The WP User Profile Avatar WordPress plugin through 1.0.1 does not validate and escape some of its shortcode attributes before outputting th CVE-2023-60683.1On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect CVE-2023-60698.8Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.CVE-2023-60704.3A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary co CVE-2023-60717.2An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator CVE-2023-60725.4A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CVE-2023-60736.3Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with th CVE-2023-60749.8A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown CVE-2023-60756.1A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function CVE-2023-60767.5A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an