Description
WordPress Plugin Credova_Financial is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Credova_Financial version 1.4.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4.9 or latest
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39342
https://plugins.svn.wordpress.org/credova-financial/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Smart Slider 3 PRO Cross-Site Scripting (3.5.0.8)
ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-5954)
WordPress Plugin Contentboxes Cross-Site Scripting (1.1)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5397)
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50091)