Sensitive Information Exposure in Accept SagePay Payments Plugin for WordPress

CVE-2025-2883

What is CVE-2025-2883?

The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is exposed to a vulnerability that allows unauthenticated attackers to access sensitive information through the publicly available phpinfo.php script. This exposure may lead to significant security risks, as it can reveal environment details and configurations that could be exploited. Users should take immediate action to secure their installations by updating to the latest version and assessing their systems for potential breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References