paymendo – Bank Transfer (Lite), CVE-2026-89304
- CVE, Research URL
- Application
- Published on
- Oct 11, 2026
- Research Description
- The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.
- Affected versions
-
max 1.1.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| paymendo – Bank Transfer (Lite) (CVE-2026-89304) , Oct 14, 2026 |
| paymendo – Bank Transfer (Lite) (CVE-2026-89305) , Oct 14, 2026 |