SQL Injection Vulnerability in Paymendo WordPress Plugin
CVE-2026-89305
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-89305?
The Paymendo WordPress plugin prior to version 1.1 is vulnerable due to inadequate sanitization and escaping of user input in SQL queries. This flaw permits authenticated users to manipulate queries, potentially leading to unauthorized access to or manipulation of the database. Such vulnerabilities pose a significant risk as they can be exploited to extract sensitive information or execute harmful commands within the affected WordPress installation.
Affected Version(s)
paymendo 0 <= 1.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.