WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
payment-gateway-stripe-and-woocommerce-integration
Published
2026-09-18
Title
Payment Gateway of Stripe for WooCommerce < 5.0.9 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint
Slug
payment-gateways-caller-for-wp-e-commerce
Published
2014-08-01
Title
Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion
Slug
payment-integration-wompi
Published
2026-10-24
Title
Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback
Slug
payment-page
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
payment-page
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
payment-page
Published
2026-02-13
Title
Payment Page | Payment Form for Stripe < 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'pricing_plan_select_text_font_family' Parameter
Slug
payment-qr-woo
Published
2025-06-05
Title
Payment QR WooCommerce <= 1.1.6 - Missing Authorization
Slug
paymentfor-gateway-for-woocommerce
Published
2026-10-12
Title
Paymentfor Gateway for WooCommerce < 1.0.6 - Unauthenticated Order Payment Forgery via Unverified Card Callbacks
Slug
payments-hubtel
Published
2026-09-29
Title
Payments for Hubtel < 1.0.2 - Unauthenticated Payment Confirmation Forgery via Delayed Payment Callback
Slug
payments-hubtel
Published
2026-09-29
Title
Payments for Hubtel < 1.0.2 - Unauthenticated Order Key Disclosure via IDOR
Slug
payments-hubtel
Published
2026-09-29
Title
Payments for Hubtel < 1.0.2 - Unauthenticated Payment Gateway Credentials Disclosure via Debug Log
Slug
payments-stripe-gateway
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
payments-stripe-gateway
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
payments-stripe-gateway
Published
2024-11-08
Title
Pay With Stripe <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
paymob-for-woocommerce
Published
2026-06-19
Title
Paymob for WooCommerce < 4.1.11 - Missing Authorization
Slug
paymob-for-woocommerce
Published
2026-08-12
Title
Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup
Slug
paymob-for-woocommerce
Published
2026-08-19
Title
Paymob for WooCommerce < 4.1.11 - Unauthenticated Stored Cross-Site Scripting
Slug
paymob-for-woocommerce
Published
2026-09-21
Title
Paymob for WooCommerce < 4.1.14 - Contributor+ Payment Gateway Configuration Deletion and Modification via Multiple AJAX Actions
Slug
paymob-for-woocommerce
Published
2026-09-21
Title
Paymob for WooCommerce < 4.1.14 - Unauthenticated Payment Bypass via Unverified Subscription Transaction Callback
Slug
paymob-for-woocommerce
Published
2026-09-21
Title
Paymob for WooCommerce < 4.1.14 - Unauthenticated Saved Card Token Write to Any User via Webhook
Slug
payoneer-checkout
Published
2025-09-05
Title
Payoneer Checkout < 3.5.0 - Missing Authorization
Slug
payos
Published
2025-09-22
Title
payOS < 1.0.76 - Cross-Site Request Forgery
Slug
paypal-brasil-para-woocommerce
Published
2026-10-27
Title
PayPal Brasil para WooCommerce < 1.7.9 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action
Slug
paypal-currency-converter-basic-for-woocommerce
Published
2015-06-10
Title
Paypal Currencucy Converter Basic For Woocommerce <= 1.3 - File Read
Slug
paypal-digital-goods-monetization-powered-by-cleeng
Published
2014-08-01
Title
paypal-digital-goods-monetization-powered-by-cleeng <= 2.2.13 - XSS in ZeroClipboard