CVE-2026-81809

Published 1 October 2026 · tracked since 1 October 2026

Description

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to perform S

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-97661 HIGH 7.2
• CVE-2026-92244 HIGH 7.2
• CVE-2026-95687 HIGH 8.8
• CVE-2026-96268 MEDIUM 6.4
• CVE-2026-96573 HIGH 7.2
• CVE-2026-96813 HIGH 7.2
• CVE-2026-15983 HIGH 8.1
• CVE-2026-85235 HIGH 7.2
• CVE-2026-89424 MEDIUM 6.4
• CVE-2026-90992 MEDIUM 6.4

→ Open the live CVE board · all tools