CVE-2026-15205

The Paymob for WooCommerce WordPress plugin (versions before 4.1.9 ) is vulnerable to unauthenticated SQL injection . The root cause is the improper sanitization of a client-supplied identifier used in a SQL query within a public payment callback. Critically, the plugin performs this query before...