Plugin icon

PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)

peachpay-for-woocommerce

Vulnerabilities:

5

Last Updated:

June 11, 2026

Active Installs:

400

Published
Title
Fixed in
CVSS
Published
2026-05-27
Title
PeachPay < 1.120.47 - Cross-Site Request Forgery to Stripe Unlink
Fixed in
Fixed in 1.120.47
CVSS
4.3 (medium)
Published
2026-01-19
Title
PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) < 1.119.9 - Missing Authorization to Unauthenticated Order Status Modification
Fixed in
Fixed in 1.119.9
CVSS
5.3 (medium)
Published
2025-09-09
Title
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net < 1.117.6 - Authenticated (Contributor+) SQL Injection via order_by Parameter
Fixed in
Fixed in 1.117.6
CVSS
6.5 (medium)
Published
2025-09-03
Title
PeachPay Payments < 1.117.5 - Missing Authorization
Fixed in
Fixed in 1.117.5
CVSS
5.3 (medium)
Published
2024-11-22
Title
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net < 1.113.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.113.0
CVSS
6.1 (medium)