PT-2026-103700 · WordPress · Paytm Payment Gateway
CVSS v3.1
7.5
عالية
| المتجه | AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Paytm Payment Gateway WordPress plugin versions prior to 2.8.9
Description
Unauthenticated users can perform SQL injection attacks because the plugin fails to properly escape data received from payment callbacks before incorporating it into a SQL statement. Additionally, the integrity check for these callbacks can be forged if the gateway is enabled without credentials.
Recommendations
Update the plugin to version 2.8.9 or later.
استغلال
إصلاح
SQL injection
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Paytm Payment Gateway