{"affected":[],"cveId":"CVE-2026-110042","cwes":["CWE-200"],"description":"The Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that displays its stored configuration, allowing users with the Contributor role and above to view secret payment-gateway API credentials, both the live and test secret keys, which grant full access to the site owner's payment account.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.9,"severity":"medium","source":"NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793557027390,"publishedAt":1793427392120,"references":[{"source":"contact@wpscan.com","tags":[],"url":"https://wpscan.com/vulnerability/49c8fecd-b944-4290-af2f-57a3d4cb06e1/"}],"remediation":[],"revision":"9c112456e98a827b7e0162c2c988c81493b14e35b44b8d6c0aa64b5b00d4c372","sources":[{"modifiedAt":1793557027390,"name":"NVD","retrievedAt":1793578550305,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110042"}],"ssvc":{"assessedAt":1793554114339,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"published","title":"CVE-2026-110042","updatedAt":1793578550305}