Credova

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Credova records in CISA KEV

No Credova vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Financial 1 record MEDIUM

Records

1 record in Financial · all components

TI-2021-16709 CVE-2021-39342 · GHSA-x9xx-826m-934x

Credova_Financial <= 1.4.8 Sensitive Information Disclosure

MEDIUM 40

The Credova_Financial WordPress plugin discloses a site's associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that has the Credova Financin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00767 Published 2021-09-29 No fix listed CWE-319

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0