Advisories · Technology

paymendo.

Every CVE that names paymendo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-89305 CVE record

CVSS 6.5 Medium

Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter
- paymendo
- SQL injection
Not analysed yet 11 Oct 2026
CVE-2026-89304 CVE record

CVSS 6.5 Medium

Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameter
- paymendo
- SQL injection
Not analysed yet 11 Oct 2026