Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-02
Paytm Payment Gateway - Security Vulnerability (CVE-2026-81740)
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of arbitrary orders, including marking unpaid orders as paid and reducing stock.
PLUGIN
Paytm Payment Gateway
CVE-2026-81740
Risk Score
Threat Entry
Updated 2026-10-01
Paytm Payment Gateway - Security Vulnerability (CVE-2026-81809)
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to perform SQL injection attacks.
PLUGIN
Paytm Payment Gateway
CVE-2026-81809
Risk Score
Threat Entry
Updated 2026-10-01
Paytm Payment Gateway - Security Vulnerability (CVE-2026-81739)
The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity check on those callbacks can be forged when the gateway is enabled without credentials, allowing unauthenticated users to store scripts that will run in the session of a store administrator.
PLUGIN
Paytm Payment Gateway
CVE-2026-81739
Risk Score