Critical vulnerability in Paytium plugin for WordPress

WordPress

What happened

A serious vulnerability has been identified in the Paytium plugin for WordPress that allows for object injection due to deserialization of untrusted data. This affects versions up to 5.0.5.

Are you affected?

Users of the Paytium plugin on WordPress may be affected if they are running versions up to 5.0.5.

What to do now

1. Upgrade to a patched version of the Paytium plugin as soon as it is available.
2. Regularly check for updates to ensure software security.
3. Review security practices related to plugin installation and management.

Sources

• cve.now/CVE-2026-114196
• cve.now/GHSA-H3V7-J844-X6H5
• CVE-2026-114196
• GHSA-H3V7-J844-X6H5
• https://patchstack.com/database/wordpress/plugin/paytium/vulnerability/wordpress-paytium-plugin-5-0-5-php-object-injection-vulnerability?_s_id=cve
• cve.now/GHSA-h3v7-j844-x6h5
• GHSA-h3v7-j844-x6h5
• https://nvd.nist.gov/vuln/detail/CVE-2026-114196

Data sources: cve.now, CISA KEV, GitHub Advisory Database, OSV.

This product uses data from the NVD API but is not endorsed or certified by the NVD.