71 matches found
CVE-2025-22652
CVE-2025-22652 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Payment Forms for Paystack Vulnerable version = 4.0.1 Component slug payment-forms-for-paystack Component link https://wordpress.org/plugins/payment-forms-for-paystack/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class...
CVE-2026-110042
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...
CVE-2026-110042
The Payment Forms for Paystack WordPress plugin, in versions prior to 4.0.6 , is vulnerable to a sensitive information disclosure. The plugin fails to properly restrict access to a configuration page, allowing users with the Contributor role or higher to view stored payment-gateway API credential...
CVE-2026-110042 Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...
WordPress Payment Forms for Paystack plugin < 4.0.6 - Contributor+ Sensitive Information Disclosure vulnerability
Contributor+ Sensitive Information Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Payment Forms for Paystack versions 4.0.6...
EUVD-2026-114580
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...
CVE-2026-110042: Unknown Payment Forms for Paystack: The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays…
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...
CVE-2026-66444
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66444 WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66444 WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66444
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
EUVD-2026-57869
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66444
Affected software: WordPress Payment Forms for Paystack plugin
CVE-2026-66444: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
PT-2026-71556
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Muhan Luo in WordPress Plugin Payment Forms for Paystack versions = 4.0.5...
Paystack Secret/Live Key - Exposure Detection
Detected exposed Paystack secret keys test or live found in application source code, configuration files, or client-side assets. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed Paystack secret keys test or live found in application source code, configuration files, or.""" import re...
CVE-2025-23655
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crystalwebpro Contact Form 7 – Paystack Add-on cf7-paystack-add-on allows Reflected XSS.This issue affects Contact Form 7 – Paystack Add-on: from n/a through = 1.2.3...