{"id":"CVE-2026-81809","published":"2026-10-01T06:17:11.197","lastModified":"2026-10-01T13:11:52.923","description":"The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to perform SQL injection attacks.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/10f2d49e-94e4-4e49-b32f-c1c75c2c6364/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Paytm Payment Gateway WordPress plugin contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands on the database. This occurs when payment callbacks are processed without proper data escaping, and can be exploited when the gateway is enabled without credentials.","exploitability":"Exploitation requires an unauthenticated attacker to trigger a payment callback with forged integrity checks, making it moderately difficult but possible with knowledge of the callback endpoint structure.","blast_radius":"If exploited, attackers could read sensitive customer data, modify payment records, or potentially escalate to full database compromise affecting all WordPress plugin data and user information.","remediation":"Upgrade to version 2.8.9 or later to fix the SQL injection vulnerability in the Paytm Payment Gateway plugin.","detection":"Monitor for unusual SQL queries in database logs that contain user-supplied callback parameters, particularly those with malformed or unexpected data patterns from payment gateway endpoints.","tags":["sql-injection","payment","wordpress","web"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:06:17.561Z"}}