Unknown Payment Gateway vulnerabilities

• unknown woocommerce stripe payment gateway, woocommerce stripe payment gateway +1 more WooCommerce Stripe Payment Gateway 10.9.0 - 11.0.1 - Customer Password Stored in Plaintext via Express Checkout CVE-2026-123145 4.4 MediumNovember 9, 2026
• unknown unipay payment gateway for woocommerce UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII Disclosure CVE-2026-123088 5.3 MediumNovember 9, 2026
• unknown payhere payment gateway PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification CVE-2026-103310 5.3 MediumNovember 2, 2026
• unknown payable payment gateway for woocommerce PAYable IPG < 1.3.1 - Unauthenticated Order Payment Forgery via Unsigned Callback CVE-2026-94361 5.3 MediumOctober 31, 2026
• unknown unipay payment gateway for woocommerce UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN Secret CVE-2026-103331 5.3 MediumOctober 28, 2026
• unknown paydunya woocommerce payment gateway PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery CVE-2026-103359 5.3 MediumOctober 27, 2026
• unknown payex payment gateway for woocommerce Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key CVE-2026-103332 5.3 MediumOctober 27, 2026
• unknown eurobank woocommerce payment gateway Eurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback CVE-2026-103300 5.3 MediumOctober 26, 2026
• unknown opay payment gateway for woocommerce OPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key CVE-2026-103319 5.3 MediumOctober 26, 2026
• unknown payment gateway nexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret CVE-2026-103299 5.3 MediumOctober 26, 2026
• unknown ccavenue payment gateway for woocommerce CCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery CVE-2026-103298 5.3 MediumOctober 26, 2026
• unknown payment gateway for telcell Payment Gateway for Telcell < 2.0.5 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret CVE-2026-103301 5.3 MediumOctober 21, 2026
• unknown sumit payment gateway for woocommerce SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via Redirect Callback CVE-2026-111957 5.3 MediumOctober 21, 2026
• unknown payment gateway for idram Payment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant Secret CVE-2026-103302 5.3 MediumOctober 21, 2026
• unknown ipospays payment gateway for woocommerce iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery CVE-2026-86791 5.3 MediumOctober 19, 2026
• unknown bdm digital payment gateway BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery CVE-2026-106010 5.3 MediumOctober 19, 2026
• unknown coinbase commerce payment gateway for woocommerce Coinbase Commerce Payment Gateway for WooCommerce <= 1.4.1 - Unauthenticated Webhook Signature Bypass via Empty-Default Webhook Shared Secret CVE-2026-103311 5.3 MediumOctober 19, 2026
• unknown cardinity payment gateway for woocommerce Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret CVE-2026-103324 5.3 MediumOctober 15, 2026
• robokassa payment gateway for woocommerce, unknown robokassa payment gateway for woocommerce +1 more Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed CVE-2026-91076 5.3 MediumOctober 14, 2026
• unknown campay shortcode payment gateway CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference CVE-2026-105975 5.3 MediumOctober 14, 2026
• unknown walletdoc payment gateway for woocommerce Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook CVE-2026-103307 8.6 HighOctober 14, 2026
• unknown yaad sarig payment gateway for wc Yaad Sarig Payment Gateway For WC < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation via IDOR CVE-2026-104651 4.3 MediumOctober 7, 2026
• unknown deema payment gateway Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Confirmation Forgery via Unverified Success Return CVE-2026-94271 5.3 MediumOctober 6, 2026
• unknown deema payment gateway Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass and Order Manipulation via Webhook CVE-2026-94270 5.3 MediumOctober 6, 2026
• unknown upi qr code payment gateway UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery CVE-2026-84169 5.3 MediumOctober 5, 2026
• paytm payment gateway, unknown paytm payment gateway +1 more Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback CVE-2026-81740 5.3 MediumOctober 2, 2026
• paytm payment gateway, unknown paytm payment gateway +1 more Paytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment Callback CVE-2026-81809 7.5 HighOctober 1, 2026
• paytm payment gateway, unknown paytm payment gateway +1 more Paytm Payment Gateway < 2.8.9 - Unauthenticated Stored XSS via Payment Callback CVE-2026-81739 7.5 HighOctober 1, 2026
• payplus tech team payment gateway, unknown payplus payment gateway +1 more WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability CVE-2026-93620 6.5 MediumSeptember 23, 2026
• unknown sumit payment gateway for woocommerce SUMIT Payment Gateway for WooCommerce < 4.0.0 - Unauthenticated Payment Confirmation Forgery via bit IPN CVE-2026-84091 5.3 MediumSeptember 23, 2026
• easy payment payment gateway for paypal on woocommerce Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion CVE-2026-92400 5.3 MediumSeptember 21, 2026
• robokassa payment gateway for woocommerce, unknown robokassa payment gateway for woocommerce +1 more Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callback CVE-2026-91017 3.7 LowSeptember 17, 2026
• unknown cryptopayment gateway CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router CVE-2026-81648 Public exploit 10.0 CriticalSeptember 13, 2026
• unknown payment gateway paypay for woocommerce WC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook CVE-2026-82215 5.9 MediumSeptember 11, 2026
• unknown epayco payment gateway for woocommerce ePayco Payment Gateway for WooCommerce < 8.4.7 - Unauthenticated Payment Confirmation Bypass CVE-2026-84043 5.3 MediumSeptember 4, 2026
• conekta group payment gateway, unknown conekta payment gateway +1 more Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery CVE-2026-16738 5.3 MediumAugust 22, 2026
• easy payment payment gateway for paypal on woocommerce Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via PayPal Advanced Return Handler CVE-2026-16621 5.3 MediumAugust 12, 2026
• jconti payment gateway for redsys & woocommerce lite Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Callback CVE-2026-12584 7.5 HighAugust 6, 2026
• elbanyaoui clover payment gateway by zaytech for woocommerce Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order CVE-2026-12493 7.5 HighJuly 27, 2026
• unknown payplus payment gateway PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Key Disclosure and Order Status Modification CVE-2026-12973 6.5 MediumJuly 20, 2026
• unknown payplus payment gateway PayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata Tampering CVE-2026-12972 5.3 MediumJuly 20, 2026
• payhere payment gateway, unknown payhere payment gateway +1 more PayHere Payment Gateway Plugin for WooCommerce <= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification CVE-2025-15475 5.3 MediumJanuary 14, 2026
• hkdigit payment gateway for telcell Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect CVE-2023-6786 6.1 MediumMay 15, 2025
• payplus payment gateway, unknown payplus payment gateway +1 more WordPress PayPlus Payment Gateway plugin <= 6.6.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37459 7.1 HighJuly 21, 2024
• payplus payment gateway, unknown payplus payment gateway +1 more PayPlus Payment Gateway < 6.6.9 - Unauthenticated SQLi CVE-2024-6205 Public exploit 9.8 CriticalJuly 19, 2024
• payplus ltd payment gateway, unknown payplus payment gateway +1 more WordPress PayPlus Payment Gateway plugin <= 7.0.7 - SQL Injection vulnerability CVE-2024-37564 8.5 HighJuly 12, 2024
• payhere payment gateway, unknown payhere payment gateway +1 more PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure CVE-2023-6064 7.5 HighJanuary 1, 2024
• unknown bitcoin / altcoin payment gateway for woocommerce & multivendor store / shop, coinmarketstats bitcoin \/ altcoin payment gateway for woocommerce +1 more Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi CVE-2022-4118 9.8 CriticalMay 8, 2023
• genetechsolutions pie register, unknown registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes +1 more Pie Register < 3.7.1.6 - Unauthenticated SQL Injection CVE-2021-24731 9.8 CriticalNovember 8, 2021
• genetechsolutions pie register, unknown registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes +1 more Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login CVE-2021-24647 Public exploit 8.1 HighNovember 8, 2021
• Show olderLoading…