VYPR
Vendor

PipraPay

Products
1
CVEs
3
Across products
1
Status
Private

Products

1

Recent CVEs

3
  • CVE-2026-124625MedNov 9, 2026
    risk 0.41cvss 6.3epss —

    A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selected_ids/ItemID leads to sql injection. It is…

  • CVE-2026-124624MedNov 9, 2026
    risk 0.34cvss 5.3epss —

    A weakness has been identified in PipraPay 3.0.0. Affected by this vulnerability is the function hash_hmac of the file pp-content/pp-include/pp-adapter.php of the component pp-token anti-CSRF Handler. Executing a manipulation can lead to hard-coded credentials. The attack may be…

  • CVE-2026-124623MedNov 9, 2026
    risk 0.31cvss 4.7epss —

    A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted…