Medium · 6.5 CVE-2026-42763 EUVD-2026-31754GHSA-mvxg-x6w9-jq73

WordPress SePay Gateway plugin <= 1.1.20 - Sensitive Data Exposure vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in SePay team SePay Gateway allows Retrieve Embedded Sensitive Data.

This issue affects SePay Gateway: from n/a through 1.1.20.

Vendor	Product	Affected	Fixed
SePay team	SePay Gateway	≤ 1.1.20	—