Direct Payments WP – Receive Payments with Forms
Direct Payments WP – Receive Payments with Forms has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
None of the 2 issues recorded for Direct Payments WP – Receive Payments with Forms have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Direct Payments WP – Receive Payments with Forms is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-49340Direct Payments WP <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Read the full analysisVulnerability Records
Direct Payments WP – Receive Payments with Forms
Author
Digages
Direct Payments WP is the ultimate plugin for WordPress users who want a simple and flexible way to accept payments. Whether you’re a freelancer, a small business owner, or running a membership site, Direct Payments WP empowers you to accept payments directly using customizable forms. With Direct Payments WP, you can accept payments via: Bank Transfers – International & Local Mobile Money – MTN MoMo, M-Pesa, Airtel, Vodafone, and many more Crypto Payments – BTC, ETH, USDT, SOL, BNB, ADA, MATIC, and many more Peer-to-Peer (P2P) Platforms – Zelle, Venmo, PayPal, GCash, Cash App, Apple Pay, Monzo, Google Pay, Payoneer, Skrill, Paytm, Monzo, Wise, and many more QR Codes Unlock all features with Pro Version Why use Direct Payments WP? Any Payment Method: Let your customers pay with their preferred options — bank transfers, mobile money, or P2P platforms. Zero Transaction Fees: Keep 100% of your revenue with no hidden costs or fees. Fast Setup: Go from installation to receiving payments in minutes, with no KYC or API keys required. Payment Forms: Create forms tailored to your specific payment needs. Secure & Reliable: Enjoy safe, encrypted transactions with payments processed directly through the preferred payment gateway. Geo-Currency: Improve payment experience by automatically showing payment methods available in the customer’s location. [PRO] Multiple Currencies: Receive payments globally with multi-currency support, with exchange rates set automatically or updated manually for full control. [PRO] Unlimited Payment Methods: Upgrade from the single payment method in the free version to unlimited payment methods with Pro, allowing you to offer more flexibility to your customers and boost sales. Instant Payment Alert Notifications: Receive instant alerts for every payment, enabling you to manage transactions in real time. Simple Dashboard Management: Confirm or cancel payments directly from your WordPress dashboard. [PRO] Customizable Payment Popups: Customize the payment process to match your brand’s colors and style. [PRO] Email Payment Confirmation: Easily confirm or cancel payments via email without logging in. [PRO] Premium Support: Create support tickets and get fast, prioritized assistance to resolve any issues quickly. What’s Next?: If you like this plugin, then consider checking out our other plugins: Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments Direct Payments WP – Receive Payments with Forms Direct Invoices – Invoicing & Payment Requests for WordPress Engraver for WooCommerce – Personalize and Customize WooCommerce Products APL – Auto-Pickup Locations for WooCommerce Digages Role Manager – User Roles & Permissions SVG Editor: Upload & Change Colors Digages Website Monitor Digages Restock Alert
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C