A vulnerability identified as critical has been detected in Paymob Plugin up to 4.1.8 on WordPress. This issue affects some unknown processing. This manipulation causes sql injection. This vulnerability is registered as CVE-2026-15205 . Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.