https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T18:52:09.579518+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-96255 fkie_cve-2026-96255 2026-10-01T18:52:09.581116+00:00

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials.

 https://vulnerability.circl.lu/vuln/ghsa-gv9c-r7rv-4q3q GHSA-gv9c-r7rv-4q3q 2026-10-01T18:52:09.581312+00:00

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials.