Razorpay vulnerabilities

Products

• For Woocommerce 4
• Payment Button 2
• Payment Button Elementor Plugin 2

Newest

• razorpay payment button elementor plugin WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-54866 7.1 HighOctober 29, 2026
• razorpay ifsc Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup CVE-2026-110222 6.9 MediumOctober 13, 2026
• razorpay for woocommerce, unknown razorpay for woocommerce +1 more Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR CVE-2026-104118 5.3 MediumOctober 4, 2026
• razorpay payment button WordPress Razorpay Payment Button plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-94179 7.1 HighSeptember 23, 2026
• razorpay for woocommerce WordPress Razorpay for WooCommerce plugin <= 4.8.7 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-74009 5.3 MediumAugust 18, 2026
• razorpay for woocommerce WordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability CVE-2026-39656 5.3 MediumApril 8, 2026
• razorpay for woocommerce Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification CVE-2025-14294 5.3 MediumFebruary 19, 2026
• razorpay subscription button elementor plugin Razorpay Subscription Button Elementor Plugin <= 1.0.3 - Reflected Cross-Site Scripting via add_query_arg and remove_query_arg Functions CVE-2024-13827 6.1 MediumMarch 5, 2025
• razorpay payment button elementor plugin, payment button +1 more Razorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site Scripting CVE-2024-10850 6.1 MediumNovember 13, 2024
• razorpay payment button plugin, payment button +1 more Razorpay Payment Button <= 2.4.6 - Reflected Cross-Site Scripting CVE-2024-10851 6.1 MediumNovember 13, 2024