High · 7.5 CVE-2026-49066 EUVD-2026-36873GHSA-gf3x-cwp4-jgfv

WordPress Conekta Payment Gateway plugin <= 6.0.0 - Sensitive Data Exposure vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: Conekta Group Product: Conekta Payment Gateway

Description

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions.

Affected products

Vendor	Product	Affected	Fixed
Conekta Group	Conekta Payment Gateway	≤ 6.0.0	—

References

https://patchstack.com/database/wordpress/plugin/conekta-payment-gateway/vulnerability/wordpress-conekta-payment-gateway-plugin-6-0-0-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry