title: PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
description: The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur.
problem types: CWE-200 Information Exposure
affected:
{
vendor: Unknown
product: PayHere Payment Gateway
versions:
status: affected, versionType: semver, version: 0, lessThan: 2.2.12
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}