CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-42763

WordPress SePay Gateway plugin <= 1.1.20 - Sensitive Data Exposure vulnerability

Status: Published
Published: 2026-05-25
Updated: 2026-05-26
Assigning organization: Patchstack

Description

Missing Authorization vulnerability in SePay team SePay Gateway allows Retrieve Embedded Sensitive Data. This issue affects SePay Gateway: from n/a through 1.1.20.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SePay team SePay Gateway

Default version status: unaffected

n/a to ≤ 1.1.20affected

References

https://patchstack.com/database/wordpress/plugin/sepay-gateway/vulnerability/wordpress-sepay-gateway-plugin-1-1-20-sensitive-data-exposure-vulnerability?_s_id=cve ↗