CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-10-31
WordPress Payment Forms for Paystack Plugin API Secret Key Disclosure Vulnerability (CVE-2026-110042)
[Affected Scope] Payment Forms for Paystack WordPress plugin versions before 4.0.6
[Impact] Users with Contributor role and above can view sensitive live and test Paystack API secret keys, granting full access to the site owner's payment account
[Mitigation] Immediately update the plugin to version 4.0.6 or higher and rotate all potentially exposed API secret keys