CVE Daily – PCI-DSS (High+Critical) https://cvedaily.com/pages/tags/pci-dss.html CVE Daily – PCI-DSS (High+Critical) en Wed, 03 Jun 2026 21:27:03 +0000 [High] CVE-2025-13371 – The MoneySpace plugin for WordPress is vulnerable to Sensitive Information Expos... https://nvd.nist.gov/vuln/detail/CVE-2025-13371 https://nvd.nist.gov/vuln/detail/CVE-2025-13371 Wed, 07 Jan 2026 12:16:47 +0000 High CVE-2025-13371

The MoneySpace plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.13.9. This is due to the plugin storing full payment card details (PAN, card holder name, expiry month/year, and CVV) in WordPress post_meta using base64_encode(), and then embedding these values into the publicly accessible mspaylink page's inline JavaScript without any aut…

CVSS: 8.6 · CWE: CWE-200

View on NVD

]]> [High] CVE-2021-38155 – OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x bef... https://nvd.nist.gov/vuln/detail/CVE-2021-38155 https://nvd.nist.gov/vuln/detail/CVE-2021-38155 Fri, 06 Aug 2021 21:15:06 +0000 High CVE-2021-38155

OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might…

CVSS: 7.5 · CWE: CWE-307

View on NVD

]]>