Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 23:52:19 +0000 CVE-2026-104639 — Razorpay for WooCommerce < 4.8.9 - Admin+ SQLi via Webhook https://db.gcve.eu/vuln/cve-2026-104639 <p><strong>Affected:</strong> Unknown Razorpay for WooCommerce</p> <p>The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret (administrators) to perform SQL injection attacks.</p> <p><strong>Affected:</strong> Unknown Razorpay for WooCommerce</p> <p>The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret (administrators) to perform SQL injection attacks.</p> https://db.gcve.eu/vuln/cve-2026-104639