GCVE - cpe:2.3:a:payu_india:payu_india:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:payu_india:payu_india:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Payu India (`9f56f99b-70b8-5d00-98af-82180bec0217`)
Product	Payu India (`daccb29b-61bd-5029-adea-007faaa3edce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-31022`	vulnerable	2026-06-08 07:17:02.239641	WordPress PayU India plugin < 3.8.8 - Account Takeover vulnerability CRITICAL (9.8) Authentication Bypass Using an Alternate Path or Channel vulnerability in PayU India PayU India payu-india allows Authentication Abuse.This issue affects PayU India: from n/a through < 3.8.8. Published: 2025-06-09T15:56:48.504Z Updated: 2026-04-28T16:12:03.867Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/payu-india/vulnerability/wordpress-payu-india-plugin-3-8-5-account-takeover-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27193`	vulnerable	2026-06-08 06:31:28.136461	WordPress PayU India plugin <= 3.8.8 - Reflected Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PayU India PayU India payu-india allows DOM-Based XSS.This issue affects PayU India: from n/a through <= 3.8.8. Published: 2024-03-15T12:50:19.441Z Updated: 2026-05-11T20:53:32.569Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/payu-india/vulnerability/wordpress-payu-india-plugin-3-8-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.