Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Paytm Payment Gateway 2.8.9 Clear all filters
TI-2026-56443 CVE-2026-81809 · GHSA-x2j9-6g95-5p2v

Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback

Priority LOW 32

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gat…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00185 Published 2026-10-01 Fixed in 2.8.9 CWE-89
TI-2026-56386 CVE-2026-81739 · GHSA-hxqp-r3vv-h45f

Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment Callback

Priority LOW 34

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity check on those callbacks can be forged w…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00216 Published 2026-10-01 Fixed in 2.8.9 CWE-79