{"id":86046,"date":"2025-12-15T13:21:18","date_gmt":"2025-12-15T13:21:18","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2023-6064-public-exposure-of-sensitive-transaction-logs-in-payhere-payment-gateway-wordpress-plugin","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6064-public-exposure-of-sensitive-transaction-logs-in-payhere-payment-gateway-wordpress-plugin\/","title":{"rendered":"CVE-2023-6064: Public Exposure of Sensitive Transaction Logs in PayHere Payment Gateway WordPress Plugin<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The vulnerability CVE-2023-6064 relates to the PayHere Payment Gateway WordPress plugin that, prior to version 2.2.12, inadvertently exposes sensitive transaction logs to the public. This flaw can be exploited by potential attackers to gain unauthorized access to sensitive information, leading to system compromise and data leakage. Given the widespread use of the PayHere plugin, this vulnerability could have severe implications for businesses and individuals if left unaddressed.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-6064
\nSeverity: High (CVSS: 7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise, data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

PayHere Payment Gateway WordPress Plugin | versions prior to 2.2.12<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit takes advantage of publicly accessible log files that are automatically created by the PayHere Payment Gateway WordPress plugin. These logs contain sensitive information about transactions. An attacker can remotely access these logs without requiring any special privileges or user interaction. By utilizing this loophole, an attacker can collect sensitive data, which could potentially be used for malicious activities such as identity theft, fraud, or unauthorized system access.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

This is a conceptual example of how an attacker might exploit this vulnerability. The attacker makes a GET request to the file hosting the logs:<\/p>\n

GET \/wp-content\/plugins\/payhere-gateway\/logs\/transaction.log HTTP\/1.1\nHost: target.example.com<\/code><\/pre>\n
The server would then respond with the log file containing sensitive transaction information.<\/p>\n
Mitigation<\/strong><\/p>\n
Users of the PayHere Payment Gateway WordPress Plugin are recommended to update the plugin to version 2.2.12 or later, which contains a patch for this vulnerability. Temporary mitigation can also be achieved by utilizing a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) to monitor and block suspicious network traffic.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The vulnerability CVE-2023-6064 relates to the PayHere Payment Gateway WordPress plugin that, prior to version 2.2.12, inadvertently exposes sensitive transaction logs to the public. This flaw can be exploited by potential attackers to gain unauthorized access to sensitive information, leading to system compromise and data leakage. Given the widespread use of the PayHere plugin, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86046","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t