Advisories · Technology

Tomlister Payflex Payment Gateway.

Every CVE that names Tomlister Payflex Payment Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103346 CVE record

CVSS 7.1 High

WordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
- Tomlister Payflex Payment Gateway
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2026
CVE-2024-47646 CVE record

CVSS 4.7 Medium

WordPress Payflex Payment Gateway plugin <= 2.6.1 - Open Redirection vulnerability
- tomlister Payflex Payment Gateway
- Open redirect
Not analysed yet 5 Oct 2024
CVE-2024-0619 CVE record

CVSS 5.3 Medium

Payflex Payment Gateway <= 2.5.0 - Missing Authorization to Order Status Update
- tomlister Payflex Payment Gateway
- Broken access control
Not analysed yet 11 Jul 2024