plugin

Money Space Vulnerabilities

1 known security issue reported for the Money Space WordPress plugin. Most recent disclosed Jan 6, 2026.

1 high

Running Money Space on your site? Check whether your installed version is affected.

Money Space <= 2.13.9 - Unauthenticated Sensitive Information Exposure

high

The MoneySpace plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.13.9. This is due to the plugin storing full payment card details (PAN, card holder name, expiry month/year, and CVV) in WordPress post_meta using base64_encode(), and then embedding these values...

CVSS:: 8.6
Affected:: up to 2.13.9
Fixed in:: 2.14.0
Disclosed:: Jan 6, 2026

CVE-2025-13371 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database