Unknown Paytm Payment Gateway vulnerabilities

3 CVEs affecting Unknown Paytm Payment Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81740, published 2026-10-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-81739, published 2026-10-01. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity check on those…
CVE-2026-81809, published 2026-10-01. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on those callbacks can…
CVE-2026-81740, published 2026-10-02. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its…