What’s Vulnerable › Products

paymendo vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your paymendo version is affected

Latest paymendo vulnerabilities

• CVE-2026-89305 — Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter (CVSS 6.5)
• CVE-2026-89304 — Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameter (CVSS 6.5)