cve/2023/CVE-2023-6064.md

### [CVE-2023-6064](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6064)
![](https://img.shields.io/static/v1?label=Product&message=PayHere%20Payment%20Gateway&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%202.2.12%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brighgreen)

### Description

The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.

### POC

#### Reference
- https://wpscan.com/vulnerability/423c8881-628b-4380-9677-65b3f5165efe

#### Github
No PoCs found on GitHub currently.