CVE-2026-49066

HIGH7.5JSON export Create alert

Description

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected products

Conekta Group / Conekta Payment Gatewayn/a – 6.0.0

References

MISChttps://patchstack.com/database/wordpress/plugin/conekta-payment-gateway/vulnerability/wordpress-conekta-payment-gateway-plugin-6-0-0-sensitive-data-exposure-vulnerability?_s_id=cve