CVE-2026-15205

The Paymob for WooCommerce WordPress plugin, in versions prior to 4.1.9 , is vulnerable to an unauthenticated SQL injection . The root cause is the failure to properly sanitize a client-supplied identifier used within a SQL query in a public payment callback. Notably, the plugin executes this que...