← WordPress Vulnerabilities
WordPress security by component

PayHere Payment Gateway Plugin for WooCommerce

PayHere Payment Gateway Plugin for WooCommerce is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 14, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: payhere-payment-gateway

CVE-2025-15475: PayHere Payment Gateway Plugin for WooCommerce: A security weakness

PayHere Payment Gateway Plugin for WooCommerce is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 14, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 14, 2026 CVE-2025-15475
PayHere Payment Gateway Plugin for WooCommerce: A security weakness
PayHere Payment Gateway Plugin for WooCommerce is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Jan 01, 2024 CVE-2023-6064
PayHere Payment Gateway: A security weakness
PayHere Payment Gateway is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.5
NVD7.5