Paymendo
Monthly
SQL injection in the paymendo WordPress plugin (all versions through 1.1) lets an authenticated user with only low privileges inject arbitrary SQL through a request parameter that is not sanitized or escaped before being placed into a query, exposing database contents to read-out. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5) confirms network reachability, no user interaction, and a high confidentiality impact with no integrity or availability effect, and publicly available exploit code exists. The authentication requirement is the key limiting factor: on sites that allow self-service registration, a subscriber account is all that is needed, while closed-registration sites require the attacker to already hold valid credentials.
Blind SQL injection in the paymendo WordPress plugin through version 1.1 allows unauthenticated remote attackers to extract sensitive data from the underlying database via an unsanitized parameter. Publicly available exploit code exists, though no CISA KEV listing indicates active exploitation at time of analysis; no EPSS score was provided. The vulnerability is rated medium severity (CVSS 6.5) and affects any WordPress site with the vulnerable plugin active.
SQL injection in the paymendo WordPress plugin (all versions through 1.1) lets an authenticated user with only low privileges inject arbitrary SQL through a request parameter that is not sanitized or escaped before being placed into a query, exposing database contents to read-out. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base 6.5) confirms network reachability, no user interaction, and a high confidentiality impact with no integrity or availability effect, and publicly available exploit code exists. The authentication requirement is the key limiting factor: on sites that allow self-service registration, a subscriber account is all that is needed, while closed-registration sites require the attacker to already hold valid credentials.
Blind SQL injection in the paymendo WordPress plugin through version 1.1 allows unauthenticated remote attackers to extract sensitive data from the underlying database via an unsanitized parameter. Publicly available exploit code exists, though no CISA KEV listing indicates active exploitation at time of analysis; no EPSS score was provided. The vulnerability is rated medium severity (CVSS 6.5) and affects any WordPress site with the vulnerable plugin active.