CVE-2026-32468

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

23th percentile - higher than 23% of all known CVEs

Summary

The Duitku Payment Gateway plugin versions up to 2.11.14 contain an unauthenticated Sensitive Data Exposure vulnerability. An attacker without logging in can access confidential information.

Risk Assessment

The risk includes leakage of sensitive data such as transaction or customer data, which could lead to privacy breaches and legal consequences.

Recommendation

It is recommended to immediately update the Duitku Payment Gateway plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.