<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: payment gateway</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-0619: The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a m</title><link>https://patchthecve.com/cve/CVE-2024-0619.html</link><guid>https://patchthecve.com/cve/CVE-2024-0619.html</guid><pubDate>Wed, 17 Jun 2026 06:53:54 +0000</pubDate><description>MEDIUM 5.3: The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the payment_callback() function in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to update the status of orders, w</description></item><item><title>CVE-2022-45362: Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payme</title><link>https://patchthecve.com/cve/CVE-2022-45362.html</link><guid>https://patchthecve.com/cve/CVE-2022-45362.html</guid><pubDate>Wed, 17 Jun 2026 05:09:52 +0000</pubDate><description>HIGH 7.2: Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0.</description></item><item><title>CVE-2023-48737: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in PT Trija</title><link>https://patchthecve.com/cve/CVE-2023-48737.html</link><guid>https://patchthecve.com/cve/CVE-2023-48737.html</guid><pubDate>Wed, 17 Jun 2026 06:34:51 +0000</pubDate><description>MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in PT Trijaya Digital Grup TriPay Payment Gateway allows Stored XSS.This issue affects TriPay Payment Gateway: from n/a through 3.2.7.</description></item><item><title>CVE-2022-45805: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in Paytm Pa</title><link>https://patchthecve.com/cve/CVE-2022-45805.html</link><guid>https://patchthecve.com/cve/CVE-2022-45805.html</guid><pubDate>Wed, 17 Jun 2026 05:10:46 +0000</pubDate><description>HIGH 8.2: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3.</description></item></channel></rss>