CVE-2026-78260

CriticalCVSS 9.3

Published: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

The Epayco plugin versions up to 8.4.6 contain an unauthenticated SQL Injection vulnerability. An attacker can manipulate database queries, potentially leading to unauthorized data access.

Risk Assessment

Risk of sensitive data leakage from the database, such as user data, and potential modification or deletion of data.

Recommendation

Update the Epayco plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in Epayco <= 8.4.6 versions.