CVE-2026-78260

An unauthenticated SQL injection vulnerability was identified in the WordPress plugin Epayco (Epayco Gateway) in versions 8.4.6 and earlier . The flaw was discovered by Lee Chul Woong and is rated CVSS 9.3 (Critical) with a changed scope, high confidentiality impact, and low availability impact. ...

EUVD-2026-66993

Unauthenticated SQL Injection in Epayco = 8.4.6 versions...

WordPress Epayco plugin <= 8.4.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Lee chul woong in WordPress Plugin Epayco versions = 8.4.6...