Skip to content
Noroxi

WooPayments – Fully Integrated Solution Built and Supported by Woo

woocommerce-payments · plugin

Known security vulnerabilities for WooPayments – Fully Integrated Solution Built and Supported by Woo. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 critical · latest Mar 31, 2026

Vulnerabilities

  • CVE-2023-35915

    WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection

    Critical 9.8

  • CVE-2023-51503

    WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)

    High 7.5

  • CVE-2023-35916

    WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)

    High 7.5

  • CVE-2026-1710

    WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax

    Medium 6.5

  • CVE-2023-49828

    WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)

    Medium 5.4

← Back to directory