Payments for Hubtel
Payments for Hubtel has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 3 disclosures.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.
Every one of the 3 issues recorded for Payments for Hubtel has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Payments for Hubtel is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.11.
CVE-2026-96173Payments for Hubtel <= 1.0.1 - Unauthenticated Insecure Direct Object Reference
Read the full analysisVulnerability Records
Payments for Hubtel
Author
Kwame Twum
NOTE: This plugin is in no way affiliated with Hubtel. It’s developed by an independent developer. All issues encountered must be addressed to the developer and not Hubtel. Contact the developer at: support@geniustechhub.com This plugin helps you integrate Hubtel as a payment gateway for your Woocommerce/WordPress website. Your customers will be able to pay you with any mobile money wallet and bank card issued in Ghana. It’s an easy way to accept payment on your website that runs on WordPress/Woocommerce. Dependency This plugin relies on __Excellium for payment submission, verifications and SMS delivery; __Privacy Policy
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C