Unrated severityNVD Advisory· Published Nov 8, 2026
CVE-2026-104639
CVE-2026-104639
Description
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQL query, allowing users able to obtain the webhook secret (administrators) to perform SQL injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <4.8.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.