Vulnerabilities / Payment Forms for Paystack
Payment Forms for Paystack vulnerabilities
Advisories WPSec published for Payment Forms for Paystack. Other sources may list more. Its attack surface: Payment Forms for Paystack on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-28 | WPSEC-2026-1848 | Payment Forms for Paystack <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via Payment Form Submission Data | High 7.2 | 4.0.6 |
| 2026-10-28 | WPSEC-2026-1847 | Payment Forms for Paystack <= 4.0.5 - Authenticated (Subscriber+) Missing Authorization to Payment Data Export | Medium 4.3 | 4.0.6 |
| 2026-10-28 | WPSEC-2026-1846 | Payment Forms for Paystack <= 4.0.5 - Unauthenticated CSV Injection via Payment Form Submission Data | Medium 5.4 | 4.0.6 |
| 2026-10-28 | WPSEC-2026-1845 | Payment Forms for Paystack <= 4.0.5 - Authenticated (Contributor+) Sensitive Information Exposure via Settings Page | Medium 6.5 | 4.0.6 |
License: CC BY 4.0