{"cve":"CVE-2025-49340","enrichment":{"created":"2026-01-05T10:15:25.807007+00:00","updated":"2026-04-30T14:30:06.273882+00:00","vendors":["wordpress","wordpress$PRODUCT$wordpress"]},"epss":{"score":0.00307},"mitre":{"cpes":[],"created":"2025-12-31T16:30:03.883000+00:00","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/49xxx/CVE-2025-49340.json","references":["https://patchstack.com/database/Wordpress/Plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"],"title":"WordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability","updated":"2026-04-28T16:13:01.829000+00:00","vendors":[],"weaknesses":["CWE-497"]},"nvd":{"cpes":[],"created":"2025-12-31T17:15:44.113000+00:00","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-49340.json","references":["https://patchstack.com/database/Wordpress/Plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"],"title":null,"updated":"2026-09-23T17:10:00.210000+00:00","vendors":[],"weaknesses":["CWE-497"]},"opencve":{"changes":[{"created":"2025-12-31T16:45:00+00:00","data":[{"details":{"new":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through 1.3.0.","old":null},"type":"description"},{"details":{"new":"WordPress Direct Payments WP plugin <= 1.3.0 - Sensitive Data Exposure vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-497"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://vdp.patchstack.com/database/wordpress/plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"c623a329-179f-4b3d-a923-ae821d181270"},{"created":"2025-12-31T18:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"32e832b5-b958-450c-90f8-7aa8649b8d7f"},{"created":"2026-01-05T10:45:00+00:00","data":[{"details":["wordpress","wordpress$PRODUCT$wordpress"],"type":"first_time"},{"details":{"added":["wordpress","wordpress$PRODUCT$wordpress"],"removed":[]},"type":"vendors"}],"id":"f71cc377-3a3f-4b17-91bd-749dffd4385f"},{"created":"2026-01-20T14:45:00+00:00","data":[{"details":{"added":["https://patchstack.com/database/wordpress/plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"],"removed":[]},"type":"references"}],"id":"04480334-3b91-47e3-8dad-dcb433960a0e"},{"created":"2026-01-20T15:30:00+00:00","data":[{"details":{"added":[],"removed":["https://vdp.patchstack.com/database/wordpress/plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"]},"type":"references"}],"id":"138d2f7b-a441-4d97-8af6-df76983cc9d0"},{"created":"2026-04-01T23:45:00+00:00","data":[{"details":{"new":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.2.","old":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through 1.3.0."},"type":"description"},{"details":{"new":"WordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability","old":"WordPress Direct Payments WP plugin <= 1.3.0 - Sensitive Data Exposure vulnerability"},"type":"title"},{"details":{"added":["https://patchstack.com/database/Wordpress/Plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"],"removed":["https://patchstack.com/database/wordpress/plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"]},"type":"references"},{"details":{"added":{},"removed":{"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}},"updated":{}},"type":"metrics"}],"id":"df86da20-012e-492b-b2a2-fd6810d69ad6"},{"created":"2026-04-23T15:00:00+00:00","data":[{"details":{"new":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.3.","old":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.2."},"type":"description"},{"details":{"new":"WordPress Direct Payments WP plugin <= 1.3.3 - Sensitive Data Exposure vulnerability","old":"WordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability"},"type":"title"},{"details":{"added":{"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"8d780345-6a99-4431-a58e-07bda1ee11f8"},{"created":"2026-04-28T18:30:00+00:00","data":[{"details":{"new":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.2.","old":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.3."},"type":"description"},{"details":{"new":"WordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability","old":"WordPress Direct Payments WP plugin <= 1.3.3 - Sensitive Data Exposure vulnerability"},"type":"title"}],"id":"22c25334-efec-4dd3-9469-ede7c014a47e"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2025-12-31T16:30:03.883000+00:00","provider":"mitre"},"description":{"data":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.3.2.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00307},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://patchstack.com/database/Wordpress/Plugin/direct-payments-wp/vulnerability/wordpress-direct-payments-wp-plugin-1-3-0-sensitive-data-exposure-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability","provider":"mitre"},"updated":{"data":"2026-04-28T16:13:01.829000+00:00","provider":"mitre"},"vendors":{"data":["wordpress","wordpress$PRODUCT$wordpress"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-497"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2025-12-31T16:30:03.883000+00:00","description":"Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through 1.3.0.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"WordPress Direct Payments WP plugin <= 1.3.0 - Sensitive Data Exposure vulnerability","updated":"2025-12-31T17:33:06.263000+00:00","vendors":[],"vulnrichment_repo_path":"2025/49xxx/CVE-2025-49340.json","weaknesses":[]}}