Skip to content
Sign in
6.5 Medium

CVE-2026-89304 The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL…

Description

The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.

Affected products and versions

Product Affected versions Fixed in
paymendo 1.1 earliest → 1.1 No fix stated

Other CVEs of paymendo

The 2 CVEs of paymendo →
CVE-2026-89305 The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL… 6.5 Medium
Track this CVE