Skip to content
OpenAdvisories

Vendor

Credova Financial

3 known vulnerabilities.

Products

Credova_Financial 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-47674

    WordPress Credova_Financial plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Credova Financial Credova_Financial credova-financial allows Cross Site Request Forgery.This issue affects Credova_Financial: from n/a through <= 2.5.0.

    Credova Financial Credova_Financial
  • Medium 5.3
    CVE-2021-39342

    Credova_Financial <= 1.4.8 Sensitive Information Disclosure

    The Credova_Financial WordPress plugin discloses a site's associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that has the Credova Financing option enabled. This affects versions…

    Credova Financial Credova_Financial Web / CMS