Feed/CVE-2026-89305
CVE-2026-89305MEDIUMCVSS 6.5

CVE-2026-89305

Published Oct 11, 2026·Updated Oct 13, 2026

NVD Description

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free