https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T22:38:25.604605+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-96255 CVE-2026-96255 — Payments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug Log 2026-10-01T22:38:25.608047+00:00

Affected: Unknown Payments for Hubtel

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials.