Plugin icon

WooCommerce PayPal Payments

woocommerce-paypal-payments

Vulnerabilities:

3

Last Updated:

September 9, 2026

Active Installs:

800000

Published
Title
Fixed in
CVSS
Published
2026-07-31
Title
WooCommerce PayPal Payments < 3.4.0 - Unauthenticated Order Key and Customer PII Disclosure via IDOR
Fixed in
Fixed in 3.4.0
CVSS
5.3 (medium)
Published
2026-05-22
Title
WooCommerce PayPal Payments < 4.0.2 - Unauthenticated Order Manipulation and Sensitive Information Disclosure
Fixed in
Fixed in 4.0.2
CVSS
8.2 (high)
Published
2023-06-20
Title
WooCommerce PayPal Payments < 2.0.5 - Merchant ID Details Update via CSRF
Fixed in
Fixed in 2.0.5
CVSS
5.4 (medium)