Payments For Hubtel (Unknown) - vulnerabilities (CVEs)

3 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-01. Vendor: Unknown.

CVEs of Payments For Hubtel

• CVE-2026-96255 - CVSS 7.5 (high), 2026-10-01: The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the…
• CVE-2026-96200 - CVSS 5.3 (medium), 2026-10-01: The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment…
• CVE-2026-96173 - CVSS 5.3 (medium), 2026-10-01: The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the requester is authorized to view an order before redirecting a public…