PT-2025-54388 · WordPress · Digages Direct Payments Wp

Jitlada · CVE-2025-49340 · Published 2025-12-31 · Updated 2025-12-31

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Digages Direct Payments WP versions through 1.3.0

Description A flaw exists in Digages Direct Payments WP that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update Digages Direct Payments WP to a version later than 1.3.0.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-49340

Affected Products

Digages Direct Payments Wp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-49340 · Security Note
• https://vdp.patchstack.com/database/wordpress/plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006495428884251059 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note