Conekta Group vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-95527Conekta Payment Gateway (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-09-23CVE Database V5CVE-2026-95527 Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions. EPSS 0.3%Vulnerability Conekta Group CWE-862 #ghsa-fch5-2g54-8rjh	CVE Database V5	2026-09-23
High	7.5	EPSS 0.3%	CVE-2026-49066Conekta Payment Gateway (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere High7.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-49066 Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. EPSS 0.3%Vulnerability Conekta Group CWE-497	CVE Database V5	2026-06-15

Page 1 of 1