CVE-2018-20985: Payeezy Wp Payeezy Pay

Critical severity, CVSS 9.8. EPSS: 7.7% chance of exploitation in the next 30 days.

The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.

Affected products

• Payeezy Wp Payeezy Pay: before 2.98 (fixed in 2.98)

Published 2019-08-22. Last modified 2026-06-17.