Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- High · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-89.
Summary
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to perform SQL injection attacks.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Unknown | Paytm Payment Gateway | before 2.8.9 | 2.8.9 | Patch available | CNA |
- Paytm Payment Gateway VendorUnknown Affected before 2.8.9 Fixed in 2.8.9 Patch available CNA
Remediation
- Fix · CNA Paytm Payment Gateway (Unknown) Fixed in 2.8.9
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Paytm Payment Gateway 2.8.9
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2026-56386 Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment CallbackPriority LOW 34
Timeline
- 2026-10-02 Threatist record created from CVE-2026-81809
- 2026-10-03 Alias added: GHSA-x2j9-6g95-5p2v
References
Sources
- CVE-2026-81809 · CVE Program
- CVE-2026-81809 · NVD
- FIRST EPSS
- GHSA-x2j9-6g95-5p2v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences