PayHere Payment Gateway

Explore PayHere Payment Gateway vulnerabilities across all versions. Currently tracking 2 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all PayHere Payment Gateway vulnerabilities before they are exploited.

Vulnerability Records

2 records


2026-01-13 17:29	PayHere Payment Gateway Plugin for WooCommerce <= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification PayHere Payment Gateway <= 2.3.9	`CVE-2025-15475`	5.3 Medium	Md. Moniruzzaman Prodhan (NomanProdhan)	Yes
2023-12-07 00:00	PayHere Payment Gateway <= 2.2.11 - Information Disclosure via Log Files PayHere Payment Gateway <= 2.2.11	`CVE-2023-6064`	5.3 Medium	Supun Halangoda	Yes

Showing 1–2 of 2 reports

Latestv2.4.5

PayHere Payment Gateway

Author

PayHere

4.5(8)

90/100

Last Updated

2026-05-20 (2mo ago)

Active Installs

2,000+

Downloads

56,526

Requires WP

6.4+

Requires PHP

Tested up to

WP 6.9.5

Created

2016-07-14 (10y ago)

PayHere is a Sri Lankan Payment Gateway Service that enables you to accept payments online from your customers via Visa, MasterCard, Amex, eZcash, mCash & Internet Banking services. You can install this plugin to list PayHere as a payment method in your WooCommerce store.

View on WordPress.org