CVE-2026-91019
Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosure
CVSS Score
4.9
EPSS Score
0.0%
EPSS Percentile
0th
The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys.
| Vendor | unknown |
| Product | event booking manager for woocommerce |
| Published | Sep 17, 2026 |
| Last Updated | Sep 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown event booking manager for woocommerce
Be the first to know when new medium vulnerabilities affecting unknown event booking manager for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Event Booking Manager for WooCommerce
5.3.6 < 5.6.0
References
Credits
Artus KG WPScan