Description
Auth. (admin+) SQL Injection (SQLi) vulnerability in TransbankDevelopers Transbank Webpay REST plugin <= 1.6.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TransbankDevelopers | Transbank Webpay REST | ≤ 1.6.6 | — |
Medium · 5.5
CVE-2023-27610
EUVD-2023-31346GHSA-c8x6-66mv-5gv8
WordPress Transbank Webpay REST Plugin <= 1.6.6 is vulnerable to SQL Injection
Published Apr 16, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack