Vulnerabilities and security researches forpaymendo-bank-transfer paymendo-bank-transfer

Oct 14, 2026

CVE, Research URL: CVE-2026-89304
Home page URL: Security reports for paymendo – Bank Transfer (Lite)
Application: paymendo – Bank Transfer (Lite)
Date: Oct 11, 2026
Research Description: The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.
Affected versions: max 1.1.
Status: vulnerable

CVE, Research URL: CVE-2026-89305
Home page URL: Security reports for paymendo – Bank Transfer (Lite)
Application: paymendo – Bank Transfer (Lite)
Date: Oct 11, 2026
Research Description: The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.
Affected versions: max 1.1.
Status: vulnerable