CVE-2023-6064: Payhere Payment Gateway

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.

Affected products

• Payhere Payhere Payment Gateway: before 2.2.12 (fixed in 2.2.12)

Published 2024-01-01. Last modified 2026-06-17.