CVE-2026-96255
2026-10-01
06h00 +00:00
06h00 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Payments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug Log
The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials.CVE 信息
参考资料
https://wpscan.com/vulnerability/726daec6-5e18-4ee1-9b97-3931f7f81c3c/
Tags : exploit, vdb-entry, technical-description
Tags : exploit, vdb-entry, technical-description
