Sensitive Data Exposure in Payment Forms for Paystack by Paystack
CVE-2026-66444

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Payment Forms For Paystack
Vendor
CVE Published:
13 August 2026

What is CVE-2026-66444?

A vulnerability has been identified in the Payment Forms for Paystack, which can lead to sensitive data exposure for subscribers. This affects all versions of the plugin up to and including 4.0.5. Attackers could exploit this flaw to gain unauthorized access to sensitive user information present in payment forms, potentially compromising user privacy and security. Website owners utilizing this plugin should take immediate action to ensure their systems are safeguarded against such exposures.

Affected Version(s)

Payment Forms for Paystack <= 4.0.5

References

https://patchstack.com/database/wordpress/plugin/payment-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhan Luo | Patchstack Bug Bounty Program
.