PT-2026-94182 · WordPress · Event Booking Manager For Woocommerce

Artus Kg

·

CVE-2026-91019

·

Published

2026-09-17

·

Updated

2026-09-17

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Event Booking Manager for WooCommerce versions prior to 5.6.0
Description Insufficient access restrictions in the payment gateway configuration allow users with Contributor-level permissions or higher to view sensitive credentials. This includes secret keys for PayPal and Stripe.
Recommendations Update to version 5.6.0 or later.

Exploit

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-91019

Affected Products

Event Booking Manager For Woocommerce