Advisories · Technology

PayHere Payment Gateway.

Every CVE that names PayHere Payment Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103310 CVE record

CVSS 5.3 Medium

PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification
- PayHere Payment Gateway
- CWE-345
Not analysed yet 2 Nov 2026
CVE-2025-15475 CVE record

CVSS 5.3 Medium

PayHere Payment Gateway Plugin for WooCommerce <= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification
- PayHere Payment Gateway
- Broken access control
Not analysed yet 14 Jan 2026
CVE-2023-6064 CVE record

CVSS 7.5 High

PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
- PayHere Payment Gateway
Not analysed yet 1 Jan 2024