Advisories · Technology

Paytm Payment Gateway.

Every CVE that names Paytm Payment Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81740 CVE record

CVSS 5.3 Medium

Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback
- Paytm Payment Gateway
- Authentication bypass
Not analysed yet 2 Oct 2026
CVE-2026-81809 CVE record

CVSS 7.5 High

Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback
- Paytm Payment Gateway
- SQL injection
Not analysed yet 1 Oct 2026
CVE-2026-81739 CVE record

CVSS 7.5 High

Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment Callback
- Paytm Payment Gateway
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2026
CVE-2022-45362 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)
- Paytm Payment Gateway
- Server-side request forgery (SSRF)
Not analysed yet 7 Dec 2023
CVE-2022-45805 CVE record

CVSS 8.2 High

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection
- Paytm Payment Gateway
- SQL injection
Not analysed yet 3 Nov 2023