Plugin icon

Paymob for WooCommerce

paymob-for-woocommerce

Vulnerabilities:

6

Last Updated:

October 5, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-09-21
Title
Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback
Fixed in
Fixed in 4.1.14
CVSS
5.3 (medium)
Published
2026-09-21
Title
Paymob for WooCommerce < 4.1.14 - Contributor+ Payment Gateway Configuration Deletion and Modification via Multiple AJAX Actions
Fixed in
Fixed in 4.1.14
CVSS
4.7 (medium)
Published
2026-09-21
Title
Paymob for WooCommerce < 4.1.14 - Unauthenticated Saved Card Token Write to Any User via Webhook
Fixed in
Fixed in 4.1.14
CVSS
5.3 (medium)
Published
2026-08-19
Title
Paymob for WooCommerce < 4.1.11 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 4.1.11
CVSS
7.2 (high)
Published
2026-08-12
Title
Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
Fixed in
Fixed in 4.1.9
CVSS
8.6 (high)
Published
2026-06-19
Title
Paymob for WooCommerce < 4.1.11 - Missing Authorization
Fixed in
Fixed in 4.1.11
CVSS
5.3 (medium)