CVE-2026-124624

A vulnerability exists in PipraPay 3.0.0 involving the pp-token anti-CSRF Handler component. Specifically, a weakness in the hash_hmac function within the file pp-content/pp-include/pp-adapter.php allows for a remote attack that can result in the disclosure of hard-coded credentials . While an ex...