CVE-2026-66444

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Sensitive Data Exposure vulnerability in Payment Forms for Paystack versions up to 4.0.5, exploitable by a user with Subscriber role.

A low-privileged user can access sensitive data, potentially leading to exposure of payment or personal information.

Update the Payment Forms for Paystack plugin to the latest patched version.

Original NVD description (English source)

Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions.