Sensitive Information Exposure in Accept SagePay Payments Plugin for WordPress

CVE-2025-2883

What is CVE-2025-2883?

The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is exposed to a vulnerability that allows unauthenticated attackers to access sensitive information through the publicly available phpinfo.php script. This exposure may lead to significant security risks, as it can reveal environment details and configurations that could be exploited. Users should take immediate action to secure their installations by updating to the latest version and assessing their systems for potential breaches.

References