Plugin icon

WooPayments: Integrated WooCommerce Payments

woocommerce-payments

Vulnerabilities:

6

Last Updated:

December 22, 2025

Active Installs:

900000

Published
Title
Fixed in
CVSS
Published
2023-12-27
Title
WooPayments < 6.7.0 - Unauthenticated Order Deletion via IDOR
Fixed in
Fixed in 6.7.0
CVSS
3.7 (low)
Published
2023-12-20
Title
WooCommerce Payments < 5.9.1 - Shop Manager+ SQLi
Fixed in
Fixed in 5.9.1
CVSS
6.8 (medium)
Published
2023-12-05
Title
WooCommerce Payments < 6.5.0 - Contributor+ Cross-Site Scripting
Fixed in
Fixed in 6.5.0
CVSS
5.9 (medium)
Published
2023-09-11
Title
WooCommerce Payments < 4.9.0 - Subscription Suspension/Activation via CSRF
Fixed in
Fixed in 4.9.0
CVSS
5.4 (medium)
Published
2023-06-22
Title
WooCommerce Payments < 4.5.1 - Intent Parameter Tampering
Fixed in
Fixed in 4.5.1
CVSS
7.5 (high)
Published
2023-03-23
Title
WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.6.2
CVSS
10.0 (critical)