Plugin icon

Mercado Pago payments for WooCommerce

woocommerce-mercadopago

Vulnerabilities:

4

Last Updated:

August 17, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-08-05
Title
Mercado Pago payments for WooCommerce < 8.9.1 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 8.9.1
CVSS
5.3 (medium)
Published
2026-05-05
Title
Mercado Pago payments for WooCommerce < 8.7.12 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure
Fixed in
Fixed in 8.7.12
CVSS
5.3 (medium)
Published
2024-07-19
Title
Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download
Fixed in
Fixed in 7.6.2
CVSS
6.5 (medium)
Published
2023-02-06
Title
Mercado Pago payments for WooCommerce < 6.4.0 - CSRF
Fixed in
Fixed in 6.4.0
CVSS
4.3 (medium)