CVE-2026-81809
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 01, 2026
Vendor
unknown
Description
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to perform SQL injection attacks.