Security
فارسی
All products

woocommerce-payments

WordPress · Plugin
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajaxCVE-2026-1710 woocommerce-payments WordPress Medium Fix reported
WooCommerce Payments <= 5.9.0 - Authenticated (Shop manager+) SQL Injection via currency parametersCVE-2023-35915 woocommerce-payments WordPress Medium Fix reported
WooCommerce Payments <= 4.5.0 - Payment Bypass woocommerce-payments WordPress Medium Fix reported
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object ReferenceCVE-2023-51503 woocommerce-payments WordPress Medium Fix reported
WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege EscalationCVE-2023-28121 woocommerce-payments WordPress Critical Fix reported
WooCommerce Payments <= 5.9.0 - Missing Authorization via redirect_pay_for_order_to_update_payment_methodCVE-2023-35916 woocommerce-payments WordPress Medium Fix reported
WooCommerce Payments <= 6.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-49828 woocommerce-payments WordPress Medium Fix reported