WordPress security by component
Payment Forms for Paystack
Plugin description
Payment Forms for Paystack creates WordPress payment forms that process transactions through Paystack.
Payment Forms for Paystack (payment-forms-for-paystack) is a WordPress plugin with 5 published CVE records in this archive. The latest tracked vulnerability was published Aug 13, 2026; the highest published CVSS base score is 7.6.
Plugin slug:
payment-forms-for-paystackLatest vulnerability
CVE-2026-66444: Payment Forms for Paystack: Sensitive information exposure
Payment Forms for Paystack is affected by sensitive information exposure. Exploitation requires an authenticated subscriber account. Successful exploitation can disclose data that should not be available to the caller. The published affected range is n/a through 4.0.5.
| Safe version |
|
||
|---|---|---|---|
| Aug 13, 2026 |
CVE-2026-66444
Payment Forms for Paystack: Sensitive information exposure
Payment Forms for Paystack is affected by sensitive information exposure. Exploitation requires an authenticated subscriber account. Successful exploitation can disclose data that should not be available to the caller. The published affected range is n/a through 4.0.5.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Apr 10, 2025 |
CVE-2024-10894
Payment Forms for Paystack: Cross-site scripting
Payment Forms for Paystack is affected by cross-site scripting. Exploitation requires an authenticated contributor account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Mar 27, 2025 |
CVE-2025-22652
Payment Forms for Paystack: SQL injection
Payment Forms for Paystack is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.6
NVDPending
|
| Apr 17, 2024 |
CVE-2024-32130
Payment Forms for Paystack: Cross-site scripting
Payment Forms for Paystack is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Feb 08, 2024 |
CVE-2023-5665
Payment Forms for Paystack: Cross-site scripting
Payment Forms for Paystack is affected by cross-site scripting. Exploitation requires an authenticated contributor account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|