Peachpay vulnerabilities

Newest

• peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi), unknown peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi) +1 more PeachPay 1.117.9 - 1.120.69 - Unauthenticated Order Key Disclosure via ConvesioPay BTCPay Status Check CVE-2026-103376 5.3 MediumOctober 17, 2026
• peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi) PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink CVE-2026-9618 Public exploit 4.3 MediumMay 28, 2026
• peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi) PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification CVE-2025-14978 5.3 MediumJanuary 20, 2026
• peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi) Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter CVE-2025-9463 6.5 MediumSeptember 10, 2025
• peachpay payments WordPress PeachPay Payments Plugin <= 1.117.4 - Broken Access Control Vulnerability CVE-2025-58634 5.3 MediumSeptember 3, 2025
• peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi) Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net <= 1.112.0 - Reflected Cross-Site Scripting CVE-2024-11362 6.1 MediumNovember 23, 2024
• peachpay related products for woocommerce Related Products for WooCommerce <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5234 6.4 MediumNovember 22, 2023