High · 7.5 CVE-2025-68035 EUVD-2026-4009GHSA-5mgq-8xvj-wv28

WordPress Tabby Checkout plugin <= 5.8.4 - Sensitive Data Exposure vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in tabbyai Tabby Checkout tabby-checkout allows Retrieve Embedded Sensitive Data.This issue affects Tabby Checkout: from n/a through <= 5.8.4.

Affected products

Vendor	Product	Affected	Fixed
tabbyai	Tabby Checkout	≤ 5.8.4	—

References

https://patchstack.com/database/Wordpress/Plugin/tabby-checkout/vulnerability/wordpress-tabby-checkout-plugin-5-8-4-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry