CVE-2026-110042
Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full access to the site owner's payment account.
| Vendor | unknown |
| Product | payment forms for paystack |
| Published | Oct 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown payment forms for paystack
Be the first to know when new unknown vulnerabilities affecting unknown payment forms for paystack are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Payment Forms for Paystack
0 < 4.0.6
References
Credits
Shikhali Jamalzade WPScan