Payments For Hubtel

WordPress plugin · payments-for-hubtel · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Payments For Hubtel on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	Payments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug Log CVE.org	>=0, <1.0.2	v1.0.2	CVE-2026-96255	Oct 1, 2026
MEDIUM CVSS 5.3	Payments for Hubtel < 1.0.2 - Unauthenticated Order Key Disclosure via IDOR CVE.org	>=0, <1.0.2	v1.0.2	CVE-2026-96173	Oct 1, 2026
MEDIUM CVSS 5.3	Payments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment Callback CVE.org	>=0, <1.0.2	v1.0.2	CVE-2026-96200	Oct 1, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.