CVE-2026-110042 Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page

The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...

CVE-2026-110042

The Payment Forms for Paystack WordPress plugin, in versions prior to 4.0.6 , is vulnerable to a sensitive information disclosure. The plugin fails to properly restrict access to a configuration page, allowing users with the Contributor role or higher to view stored payment-gateway API credential...

EUVD-2026-114580

The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...

CVE-2026-110042: Unknown Payment Forms for Paystack: The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays…

The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full...