Filtered by vendor Credova
Subscriptions
Filtered by product Financial
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2021-39342 | 1 Credova | 1 Financial | 2024-11-21 | 5.3 Medium |
The Credova_Financial WordPress plugin discloses a site's associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that has the Credova Financing option enabled. This affects versions up to, and including, 1.4.8. |
Page 1 of 1.