PT-2026-43154 · Unknown · Sepay Gateway

Park Hyun Woo · Published 2026-05-25 · Updated 2026-05-26 · CVE-2026-42763

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SePay Gateway versions prior to 1.1.21

Description A missing authorization issue in the SePay Gateway allows for the retrieval of embedded sensitive data.

Recommendations Update to a version later than 1.1.20.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-42763

Affected Products

Sepay Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42763 · Security Note
• https://patchstack.com/database/wordpress/plugin/sepay-gateway/vulnerability/wordpress-sepay-gateway-plugin-1-1-20-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/54931 · Telegram Post