WordPress Hesabfa Accounting Plugin Sensitive Data Exposure Vulnerability

Vulnerability

A vulnerability allowing the retrieval of embedded sensitive data has been identified in the Hesabfa Accounting WordPress plugin, affecting versions through 2.2.4. This issue arises from the insertion of sensitive information into sent data, which can be accessed by unauthorized users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information that is typically restricted, potentially allowing for further exploitation of other weaknesses within the system.

Added: Aug 28, 2025, 2:03 PM
Updated: Aug 28, 2025, 2:03 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
7.4
remediation
0.0
relevance
0.4
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.