CVE-2026-104639

The Razorpay for WooCommerce WordPress plugin, in versions prior to 4.8.9 , is vulnerable to SQL injection . The root cause is the failure to properly sanitize and escape values derived from incoming webhook requests before utilizing them in a SQL query. This vulnerability allows users who posses...