EUVD-2026-114580

The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...

CVE-2026-110042

The Payment Forms for Paystack WordPress plugin, in versions before 4.0.6 , is vulnerable to a sensitive information disclosure. The software fails to properly restrict access to a configuration page, which allows users with a Contributor role or higher to view stored secret payment-gateway API c...

CVE-2026-110042 Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page

The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...

CVE-2026-110042: Unknown Payment Forms for Paystack: The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays…

The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...

CVE-2026-25146: Exposure of Sensitive Information to an Unauthorized Actor

OpenEMR is a free and open source electronic health records and medical practice management application. From 5.0.2 to before 8.0.0, there are at least two paths where the gatewayapikey secret value is rendered to the client in plaintext. These secret keys being leaked could result in arbitrary...